5.9
Medium
CVE-2021-25509 A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite…
Description
A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Flow 4.8 | earliest → < 4.8.5.0 | 4.8.5.0 |
Other CVEs of Samsung Flow
The 11 CVEs of Samsung Flow →
CVE-2026-21134
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive…
6.1
Medium
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data
5.1
Medium
CVE-2026-21131
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary…
2.1
Low
CVE-2025-20972
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers…
6.2
Medium