CVE-2021-0953

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2021-1024

CVE-2021-1024 affects Android 12 and is described in multiple connected sources as a flaw in EventResultPersister.java where an intent redirection can occur due to a confused deputy. This leads to local escalation of privilege with system execution privileges potentially required. The exploitatio...

CVE-2021-1024

In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android I...

Samsung Tags Information Disclosure Vulnerability

Samsung Tags is a tagging feature for Samsung mobile devices. An information disclosure vulnerability exists in Samsung Tags that stems from improper intent redirection handling in Tags. An attacker could exploit the vulnerability to access sensitive information...

Samsung SemRewardManager BSSID Information Disclosure Vulnerability

Samsung SemRewardManager is an application for Samsung Samsung mobile devices. An information disclosure vulnerability exists in Samsung SemRewardManager that stems from improper use of implicit intent in SemRewardManager, which can be exploited by an attacker to access the BSSID...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

Input validation

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25526

CVE-2021-25526 describes an intent redirection vulnerability in Samsung Blockchain Wallet versions prior to 1.3.02.8. The issue, affecting the wallet component, allows an attacker to cause privileged actions to be executed via faulty redirection. Technical details consistently point to Samsung’s ...

CVE-2021-25515

Samsung SemRewardManager on Android is affected by CVE-2021-25515 due to improper usage of implicit intents, enabling an attacker with local access to read the device’s BSSID. The root cause is an implicit-intent misuse in SemRewardManager prior to SMR Dec-2021 Release 1, leading to information d...

CVE-2021-25514

Technical details about CVE-2021-25514 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

PT-2021-16716 · Samsung · Samsung Blockchain Wallet

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Wallet versions prior to 1.3.02.8 Description: The issue allows an attacker to execute privileged actions due to an intent redirection vulnerability. Recommendations: For versions prior to 1.3.02.8, update to version 1.3.02...