CVE-2021-25343

3.3 lowEPSS 0.2%

Low (3.3) in samsung members. EPSS 0.2% chance of exploitation in the next 30 days.

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2021-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

samsung:members

References

https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb

Check your stack JSON