CVE-2021-25390 — Improper Export of Android Application Components in Mobile Devices

CWE-926 — Improper Export of Android Application Components3 documents3 sources

Severity

4.0MEDIUMNVD

EPSS

0.0%

top 95.07%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Devices Google Android

Timeline

PublishedJun 11

Latest updateMay 24

Description

Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.5 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devicesO(8.1), P(9.x), Q(10.0), R(11.0) — SMR MAY-2021 Release 1

▶NVDgoogle/android4 versions+3

🔴Vulnerability Details

GHSA

GHSA-x9rc-cq72-9564: Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action↗2022-05-24

▶

CVEList

CVE-2021-25390: Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action↗2021-06-11

▶