Skip to content
OpenAdvisories
Medium · 4.0 CVE-2021-25343 EUVD-2021-12239GHSA-8mqf-hqpq-qxwj

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.…

Published Mar 4, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Members Android O(8.1) and below – < 2.4.81.13, Android P(9.0) and above – < 3.8.00.13 2.4.81.13

References