Skip to content
feed: live
>_0dayNews
CVE Record
[ MEDIUM ]CVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

cat cve-2021-25337.json
Vendor
Samsung
Product
Mobile Devices
CVSS
4.4
EPSS (exploit probability)
2.8%
Status
kev
CISA patch-by (BOD 22-01)
Published
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-25337

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-11-08. Required action per CISA: Apply updates per vendor instructions. Due date: 2022-11-29.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.