5.5
Medium
CVE-2021-25381 Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in…
Description
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Account 12.1 | earliest → < 12.1.1.3 | 12.1.1.3 |
| Samsung Account 10.8 | earliest → < 10.8.0.4 | 10.8.0.4 |
Other CVEs of Samsung Account
The 29 CVEs of Samsung Account →
CVE-2026-21127
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers…
6.9
Medium
CVE-2026-20994
URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token
6.9
Medium
CVE-2025-58487
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary…
4.0
Medium
CVE-2025-58486
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary…
4.0
Medium