CVE-2021-25349

Published: Mar 25, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent.

Affected (1)

Products: Samsung: Slow Motion Editor

Samsung

1 product

Slow Motion Editor

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Slow Motion Editor	Before 3.5.18.5

Running on/with	Platform Versions
Google Android	Version 10.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

https://security.samsungmobile.com/

Source: mobile.security@samsung.com

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb

Source: mobile.security@samsung.com

Vendor Advisory

https://security.samsungmobile.com/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.