PT-2021-16617 · Samsung · Samsung Message
CVE-2021-25426
·
Published
2021-07-08
·
Updated
2022-09-23
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Samsung Message versions prior to SMR July-2021 Release 1
Description:
The issue is related to an improper component protection vulnerability in the SmsViewerActivity of Samsung Message. This vulnerability allows untrusted applications to access Message files.
Recommendations:
For Samsung Message versions prior to SMR July-2021 Release 1, update to a version that is SMR July-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SmsViewerActivity to minimize the risk of exploitation.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Samsung Message