CVE-2021-25397

Name of the Vulnerable Software and Affected Versions: TelephonyUI versions prior to SMR MAY-2021 Release 1

Description: The issue is related to improper access control in TelephonyUI, allowing local attackers to write arbitrary files of the telephony process via untrusted applications. This can be exploited by local attackers.

Recommendations: For versions prior to SMR MAY-2021 Release 1, update to SMR MAY-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to untrusted applications to minimize the risk of exploitation.