Not rated
CVE-2021-25403 Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and…
Description
Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Account | Versions not published |
Other CVEs of Samsung Account
The 29 CVEs of Samsung Account →
CVE-2026-21127
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers…
6.9
Medium
CVE-2026-20994
URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token
6.9
Medium
CVE-2025-58487
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary…
4.0
Medium
CVE-2025-58486
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary…
4.0
Medium