CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Samsung MobileCNA
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
samsungslow_motion_editor
𝑥
< 3.5.18.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb