Skip to content
OpenAdvisories
Medium · 4.4 Known exploited Public exploit CVE-2021-25337 EUVD-2021-12233GHSA-7x25-8cjm-2rj9

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to rea…

Published Mar 4, 2021 · Updated Oct 21, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Selected P(9.0), Q(10.0), R(11.0) – < SMR Mar-2021 Release 1 SMR Mar-2021 Release 1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References