Samsung Smart Touch Call vulnerabilities

CVE-2025-58488 [MEDIUM] CVE-2025-58488: Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1. Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability.

CVE-2024-49417 [LOW] CVE-2024-49417: Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

CVE-2021-25448 [MEDIUM] CWE-284 CVE-2021-25448: Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview.