CVE-2021-25357

State: Published
Severity: 5.6 Medium
Published: Apr 9, 2021
Updated: Aug 3, 2024
Reserved: Jan 19, 2021

Description

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information.

Scores

CVSS	Score	Vector	Source
3.1	5.6 Medium	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L	Samsung Mobile

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
Samsung Mobile DevicesSamsung Mobile	O(8.x), P(9.0), Q(10.0), R(11.0) to before SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0) and 3.6.80.7 in Android R(11.0)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.