CVE-2021-25355CWE-285

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the…

Medium · published March 25, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-03-25T16:13Z
EPSS history
Timeline
  • 25 MAR 16:13Z
    Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the…
    cvelistv5