CVE-2021-25527

CVE-2021-25527 affects Samsung Pay in India prior to 4.1.77, where improper export of Android application components allows an attacker to access Bill Pay and Recharge menus without authentication. Root cause: components exported without proper access controls. Impact: affects UI workflows for bi...

CVE-2021-25525

Samsung Pay (US only) versions prior to 4.0.65 are affected by an improper check/handling of exception conditions, allowing an attacker to use NFC without user recognition. The root cause is described as improper exception handling. Impact is unauthorized NFC usage without user interaction. No ex...