Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2021-25393

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.

Description

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Mobile Devices

  • Q(10.0) , R(11.0) to < SMR MAY-2021 Release 1affected

References