PT-2021-16594
CVE-2021-25403
·
Published
2021-06-11
·
Updated
2022-07-30
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Samsung Account versions prior to 10.8.0.4
Samsung Account versions prior to 12.2.0.9 in Android Q(10.0) and above
Description:
The issue allows an attacker to access contacts and file provider using the SettingWebView component.
Recommendations:
For versions prior to 10.8.0.4, update to version 10.8.0.4 or later.
For versions prior to 12.2.0.9 in Android Q(10.0) and above, update to version 12.2.0.9 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾