Skip to content
OpenAdvisories
Medium · 5.6 CVE-2021-25357 EUVD-2021-12253GHSA-mvx3-h3xq-hvwm

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q…

Published Apr 9, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices O(8.x), P(9.0), Q(10.0), R(11.0) – < SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0) and 3.6.80.7 in Android R(11.0) SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0) and 3.6.80.7 in Android R(11.0)

References