Skip to content
OpenAdvisories
High · 7.1 CVE-2025-21079 EUVD-2025-37793GHSA-vrx8-mx5x-r6qv

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrar…

Published Nov 5, 2025 · Updated Nov 5, 2025 · Assigned by SamsungMobile

Description

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Members — 5.5.01.3

References