Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25359 State: PUBLISHED Published: 2021-04-09T17:35:16 Last Updated: 2024-08-03T20:03:05.532Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without proper permissions via untrusted applications. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25360 State: PUBLISHED Published: 2021-04-09T17:35:29 Last Updated: 2024-08-03T20:03:05.575Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25361 State: PUBLISHED Published: 2021-04-09T17:35:43 Last Updated: 2024-08-03T20:03:05.539Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-22 Description: An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25362 State: PUBLISHED Published: 2021-04-09T17:36:03 Last Updated: 2024-08-03T20:03:05.743Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25363 State: PUBLISHED Published: 2021-04-09T17:36:17 Last Updated: 2024-08-03T20:03:05.487Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25364 State: PUBLISHED Published: 2021-04-09T17:36:28 Last Updated: 2024-08-03T20:03:05.632Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25365 State: PUBLISHED Published: 2021-04-09T17:36:41 Last Updated: 2024-08-03T20:03:05.586Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25366 State: PUBLISHED Published: 2021-03-25T16:14:25 Last Updated: 2024-08-03T20:03:05.615Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-703 Description: Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25367 State: PUBLISHED Published: 2021-03-25T16:14:52 Last Updated: 2024-08-03T20:03:05.341Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-22 Description: Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25368 State: PUBLISHED Published: 2021-03-25T16:15:35 Last Updated: 2024-08-03T20:03:05.623Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Cloud Problem Types: CWE-287 Description: Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25369 State: PUBLISHED Published: 2021-03-26T18:22:48.000Z Last Updated: 2025-10-21T23:25:51.373Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25370 State: PUBLISHED Published: 2021-03-26T18:23:25.000Z Last Updated: 2025-10-21T23:25:51.240Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CVE-703: Improper Check or Handling of Exceptional Conditions Description: An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25371 State: PUBLISHED Published: 2021-03-26T18:24:15.000Z Last Updated: 2025-10-21T23:25:51.106Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-912 Description: A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25372 State: PUBLISHED Published: 2021-03-26T18:25:04.000Z Last Updated: 2025-10-21T23:25:50.969Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CVE-703: Improper Check or Handling of Exceptional Conditions Description: An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25373 State: PUBLISHED Published: 2021-04-09T17:37:27 Last Updated: 2024-08-03T20:03:05.576Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Customization Service Problem Types: CWE-285 Description: Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.
lyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25374 State: PUBLISHED Published: 2021-04-09T17:38:29 Last Updated: 2024-08-03T20:03:05.585Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Members Problem Types: CWE-285 Description: An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25375 State: PUBLISHED Published: 2021-04-09T17:38:48 Last Updated: 2024-08-03T20:03:05.542Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-200 Description: Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25376 State: PUBLISHED Published: 2021-04-09T17:39:06 Last Updated: 2024-08-03T20:03:05.532Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-200 Description: An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25377 State: PUBLISHED Published: 2021-04-09T17:39:23 Last Updated: 2024-08-03T20:03:05.596Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Experience Service Problem Types: CWE-287 Description: Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25378 State: PUBLISHED Published: 2021-04-09T17:39:44 Last Updated: 2024-08-03T20:03:05.621Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: SmartThings Problem Types: CWE-20 Description: Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25379 State: PUBLISHED Published: 2021-04-09T17:40:06 Last Updated: 2024-08-03T20:03:05.863Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Gallery Problem Types: CWE-926 Description: Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25380 State: PUBLISHED Published: 2021-04-09T17:40:26 Last Updated: 2024-08-03T20:03:05.567Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Bixby Problem Types: CWE-703 Description: Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25381 State: PUBLISHED Published: 2021-04-09T17:40:41 Last Updated: 2024-08-03T20:03:05.642Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-285 Description: Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25382 State: PUBLISHED Published: 2021-04-23T14:50:27 Last Updated: 2024-08-03T20:03:05.555Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285 Description: An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10
CVE ID: CVE-2021-25383 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.591Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25384 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.529Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25385 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.624Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-121 Description: An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25386 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.858Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-121 Description: An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25387 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.544Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25388 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.582Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 Description: Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25389 State: PUBLISHED Published: 2021-06-11T14:45:21 Last Updated: 2024-08-03T20:03:05.529Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 Description: Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25390 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.563Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 Description: Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25391 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.636Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 Description: Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25392 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.579Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25393 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.620Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-94 Description: Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25394 State: PUBLISHED Published: 2021-06-11T14:45:22.000Z Last Updated: 2025-10-21T23:25:42.595Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-416 Description: A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25395 State: PUBLISHED Published: 2021-06-11T14:45:22.000Z Last Updated: 2025-10-21T23:25:42.440Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-362 Description: A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25396 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.578Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Description: An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25397 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.586Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 Description: An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications. Additional Analyst Notes: - CVE Program Container: References: - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5
CVE ID: CVE-2021-25398 State: PUBLISHED Published: 2021-06-11T14:45:22 Last Updated: 2024-08-03T20:03:05.592Z Vendors: Samsung Mobile Products: Bixby Voice Problem Types: CWE-561 Description: Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5