CVE-2021-25353

7.1 highEPSS 0.2%

High (7.1) in samsung galaxy themes. EPSS 0.2% chance of exploitation in the next 30 days.

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2021-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

samsung:galaxy_themes

References

https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb

Check your stack JSON