Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-25353 EUVD-2021-12249GHSA-hx6r-fxq2-3wm8

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Ga…

Published Mar 25, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Galaxy Themes

Description

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Themes unspecified – < 5.2.00.1215 5.2.00.1215

References