cve.bz

CVE-2021-25381

7.8 highEPSS 0.2%

High (7.8) in samsung account. EPSS 0.2% chance of exploitation in the next 30 days.

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWEs
CWE-276, CWE-285
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON