CVE-2021-25352

Affected product/component: Samsung Bixby Voice. Vulnerability: Privilege escalation via hijacking/modifying a PendingIntent with implicit intents. Root cause: Implicit PendingIntent handling allows an attacker to execute privileged actions when interacting with Bixby Voice. Affected versions: pr...

CVE-2021-25398

CVE-2021-25398 affects Samsung Bixby Voice prior to 3.1.12, described as an intent redirection vulnerability that permits an attacker to access contacts. The connected documents indicate the issue exists in Bixby Voice and is addressed by upgrading to version 3.1.12 or later.

CVE-2023-42543

CVE-2023-42543 affects Samsung/Bixby Voice: improper verification of intent by the broadcast receiver in Bixby Voice prior to version 3.3.35.12. The underlying issue allows an attacker to access arbitrary data using Bixby Voice privileges. The impact is confidentiality (HIGH) with no impact to in...