PT-2021-16546
CVE-2021-25353
·
Published
2021-03-25
·
Updated
2021-04-01
Description by
CVSS 3.1
7.1
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Galaxy Themes versions prior to 5.2.00.1215
Description:
The issue allows local attackers to read and write private file directories of the Galaxy Themes application without permission. This is achieved by hijacking an empty PendingIntent.
Recommendations:
For Galaxy Themes versions prior to 5.2.00.1215, update to version 5.2.00.1215 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾