CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

Input validation

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25526

CVE-2021-25526 describes an intent redirection vulnerability in Samsung Blockchain Wallet versions prior to 1.3.02.8. The issue, affecting the wallet component, allows an attacker to cause privileged actions to be executed via faulty redirection. Technical details consistently point to Samsung’s ...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2021-25515

Samsung SemRewardManager on Android is affected by CVE-2021-25515 due to improper usage of implicit intents, enabling an attacker with local access to read the device’s BSSID. The root cause is an implicit-intent misuse in SemRewardManager prior to SMR Dec-2021 Release 1, leading to information d...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-25514

Technical details about CVE-2021-25514 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

PT-2021-16705 · Unknown · Semrewardmanager

Name of the Vulnerable Software and Affected Versions: SemRewardManager versions prior to SMR Dec-2021 Release 1 Description: The issue is related to an improper usage of implicit intent in SemRewardManager, allowing attackers to access BSSID. Recommendations: For versions prior to SMR Dec-2021...

PT-2021-16716 · Samsung · Samsung Blockchain Wallet

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Wallet versions prior to 1.3.02.8 Description: The issue allows an attacker to execute privileged actions due to an intent redirection vulnerability. Recommendations: For versions prior to 1.3.02.8, update to version 1.3.02...

Samsung SMR 安全漏洞

Samsung Tags is a tagging feature for Samsung mobile devices. An information disclosure vulnerability exists in Samsung Tags that stems from improper intent redirection handling in Tags. An attacker could exploit the vulnerability to access sensitive information...

Mozilla Firefox 跨站脚本漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has a cross-site scripting vulnerability that stems from the fact that Firefox searches for text when a URL is received via the SEND intent, but subsequent use of the address bar can cause the URL to load...

PUB-A-191283525

In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-41256

nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally...