Information disclosure

Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action...

Information disclosure

Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts...

Information disclosure

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

Information disclosure

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

Information disclosure

Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...

CVE-2021-25403

Technical details are not publicly provided in the connected documents for CVE-2021-25403. Monitor official advisories and vendor updates for further information.

CVE-2021-25400

CVE-2021-25400 affects Samsung Internet prior to 14.0.1.20. The vulnerability is described as an intent redirection that could let an attacker execute a privileged action. Public technical details in connected sources are limited to the affected product and the version before the patch; exploitat...

CVE-2021-25401

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

CVE-2021-25400

Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...

CVE-2021-25401

Samsung Health (Android) before v6.16 contains an intent redirection vulnerability that could allow an attacker to trigger privileged actions within the app. Multiple sources (NVD entry CVE-2021-25401 and Red Hat/NVD mirrors) describe the issue as an intent redirection that enables execution of p...

CVE-2021-25390

CVE-2021-25390 corresponds to an intent redirection vulnerability in Samsung’s PhotoTable within the SMR MAY-2021 Release 1. Affected component/file: PhotoTable (Samsung’s software update stack). Root cause and impact, as documented: it enables an attacker with local access to perform a privilege...

CVE-2021-25390

Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action...

CVE-2021-25398

Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts...

CVE-2021-25391

Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action...

CVE-2021-25398

CVE-2021-25398 affects Samsung Bixby Voice prior to 3.1.12, described as an intent redirection vulnerability that permits an attacker to access contacts. The connected documents indicate the issue exists in Bixby Voice and is addressed by upgrading to version 3.1.12 or later.

CVE-2021-25391

CVE-2021-25391 is an Intent redirection vulnerability in Samsung Secure Folder prior to SMR MAY-2021 Release 1. The issue allows an attacker to execute a privileged action through intent redirection. Affected: Secure Folder component on Samsung devices; impact per CVSSv3.1: base score 4.0 (MEDIUM...

CVE-2021-25414

Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege...

Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users

Multiple critical security flaws have been disclosed in Samsung's pre-installed Android apps, which, if successfully exploited, could have allowed adversaries access to personal data without users' consent and take control of the devices. "The impact of these bugs could have allowed an attacker t...