Lucene search

Samsung MobileCVE-2021-25349

HistoryMar 25, 2021 - 5:15 p.m.

CVE-2021-25349

2021-03-2517:15:13

CWE-284

Samsung Mobile

web.nvd.nist.gov

cve

2021

25349

unsafe

pendingintent

slow motion editor

unauthorized action

hijacking

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent.

Affected configurations

Nvd

Node

samsungslow_motion_editorRange<3.5.18.5

AND

googleandroidMatch10.0

VendorProductVersionCPE
samsungslow_motion_editor*cpe:2.3:a:samsung:slow_motion_editor:*:*:*:*:*:*:*:*
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	slow_motion_editor	*	cpe:2.3:a:samsung:slow_motion_editor::::::::
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*

CNA Affected

[
  {
    "product": "Slow Motion Editor",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "3.5.18.5",
        "status": "affected",
        "version": "Android Q(10.0)",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/

security.samsungmobile.com/serviceWeb.smsb

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-25349