5.5
Medium
CVE-2021-25353 Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private…
Description
Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Galaxy Themes 5.2 | earliest → < 5.2.00.1215 | 5.2.00.1215 |