CVE-2021-29370: Improper Neutralization of Input During Web Page Generation

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25357

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...

CVE-2021-25364

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information...

Design/Logic Flaw

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

Information disclosure

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25357

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...

CVE-2021-25364

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25379

Samsung Gallery (Android) prior to version 5.4.16.1 is affected by an intent-redirection elevation-of-privilege vulnerability. The issue allows an attacker to trigger privileged actions within the app. Public sources consistently describe the flaw as an elevation of privilege via intent redirecti...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25377

CVE-2021-25377 affects Samsung Experience Service on Android: privilege escalation via an intent redirection that enables execution of a privileged action. Affected versions are 10.8.0.4 (Android P) and 12.2.0.5 (Android Q). Exploitation is described as a local action with no user interaction req...

PT-2021-16557 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR APR-2021 Release 1 Description: A pendingIntent hijacking issue allows unprivileged applications to access contact information. Recommendations: For versions prior to SMR APR-2021 Release 1, update to SMR...

PT-2021-16568

Name of the Vulnerable Software and Affected Versions: Samsung Experience Service versions 10.8.0.4 and earlier in Android P9.0 and below, and 12.2.0.5 and earlier in Android Q10.0 and above Description: The issue allows an attacker to execute privileged actions due to intent redirection...

PT-2021-16570

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 5.4.16.1 Description: The issue allows an attacker to execute privileged actions due to an intent redirection vulnerability. Recommendations: For versions prior to 5.4.16.1, update to version 5.4.16.1 or later to...