Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-25520 EUVD-2021-12416GHSA-7cw2-xhmh-jqc7

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrust…

Published Dec 8, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Internet

Description

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Internet - – < 16.0.2 16.0.2

References