CVE-2021-25388 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.1 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Samsung Mobile	CNA	7.1 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Vendor	Product	Version
google	android	11.0

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-926 - Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
CWE-354 - Improper Validation of Integrity Check Value
The software does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References

https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5

https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5