CVE-2021-25357

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...

CVE-2021-25357

CVE-2021-25357 describes a pendingIntent hijacking vulnerability in Samsung’s Create Movie component, allowing unprivileged apps to access contact information. Affected releases cover Android 8.x (O) and 9.0 (P) with SMR APR-2021 Release 1, Android 10 (Q) version 3.4.81.1, and Android 11 (R) vers...

PT-2021-16564 · Google · Android

Name of the Vulnerable Software and Affected Versions: Customization Service versions prior to 2.2.02.1 in Android O8.x Customization Service versions prior to 2.4.03.0 in Android P9.0 Customization Service versions prior to 2.7.02.1 in Android Q10.0 Customization Service versions prior to 2.9.01...

Samsung 多款产品授权问题漏洞

Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...

Samsung Account 授权问题漏洞

Samsung Account is a cell phone account from Samsung South Korea. A security vulnerability exists in Samsung Account in versions 10.8.0.4, which allows local attackers to perform unauthorized actions by hijacking PendingIntent without permission...

Unspecified Vulnerability in Samsung Notes

Samsung Notes is an application from Samsung, a South Korean company. It is used to provide a recording function. A security vulnerability exists in Samsung Notes prior to version 4.2.00.22, which can be exploited by a local attacker to conduct illegal operations by hijacking a PendingIntent...

CVE-2021-25355

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

CVE-2021-25353

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent...

CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25355

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Code injection

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Code injection

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Design/Logic Flaw

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent...

CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Information disclosure

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25355

CVE-2021-25355 affects Samsung Notes prior to version 4.2.00.22. The root cause is unsafe use of PendingIntent, enabling local attackers to perform unauthorized actions by hijacking the PendingIntent without permission. Impact is local, with potential for partial confidentiality/integrity/availab...

CVE-2021-25353

CVE-2021-25353 affects Samsung Galaxy Themes prior to version 5.2.00.1215. The vulnerability arises from using an empty PendingIntent, which lets a local attacker hijack the PendingIntent to read and write private files/directories of the Galaxy Themes application without permission. Impact is li...

CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...