Sign in

6.8 Medium

CVE-2021-25397 An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to…

Description

An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium

Do you use Samsung Mobile Devices?

Track this CVE Watch Samsung Mobile Devices Check my SBOMs

www.cveye.io/en/cve/CVE-2021-25397

Timeline

Published June 11, 2021
Last modified August 3, 2024

References

blog.oversecured.com blog.oversecured.com
security.samsungmobile.com security.samsungmobile.com

Track this CVE