3.8
Low
CVE-2021-25527 Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77…
Description
Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Pay 4.1 | earliest → < 4.1.77 | 4.1.77 |
Other CVEs of Samsung Pay
The 6 CVEs of Samsung Pay →
CVE-2024-20850
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to…
6.2
Medium
CVE-2022-36872
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47…
5.0
Medium
CVE-2022-36870
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and…
5.0
Medium
CVE-2022-36871
Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for…
5.0
Medium