Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-25381 EUVD-2021-12277GHSA-984v-wwcj-4259

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above a…

Published Apr 9, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Account Android P(9.0) and below – < 10.8.0.4, Android Q(10.0) and above – < 12.1.1.3 10.8.0.4

References