Medium · 4.0 CVE-2021-25364 EUVD-2021-12260GHSA-342r-v98v-xjfv

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact…

Published Apr 9, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information.

Affected products

Vendor	Product	Affected	Fixed
Samsung Mobile	Samsung Mobile Devices	R(11.0) – < SMR APR-2021 Release 1	SMR APR-2021 Release 1

References

https://security.samsungmobile.com/
https://security.samsungmobile.com/securityUpdate.smsb