ACTIEF MISBRUIKT
CVE-2021-25337: Samsung Mobile Devices Improper Access Control Vulnerability
| Leverancier | Samsung |
|---|---|
| Product | Mobile Devices |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 8 nov 2022 |
| CISA-deadline (Amerikaanse overheid) | 29 nov 2022 |
| Zwakte (CWE) | CWE-269 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.
BRONNEN
Andere lekken bij Samsung
- CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.