CVE-2021-25352CWE-285

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the…

Medium · published March 25, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-03-25T16:11Z
EPSS history
Timeline
  • 25 MAR 16:11Z
    Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the…
    cvelistv5