Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2021-25343

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Samsung Mobile

Description

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Members

  • Android O(8.1) and below to < 2.4.81.13affected
  • Android P(9.0) and above to < 3.8.00.13affected

References