CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Samsung MobileCNA
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
VendorProductVersion
samsunginternet
𝑥
< 13.0.1.60
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb