4.0
Moyenne
CVE-2021-25343 Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and…
Description
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Samsung Members 3.8 | premières → < 3.8.00.13 | 3.8.00.13 |
| Samsung Members 2.4 | premières → < 2.4.81.13 | 2.4.81.13 |
Autres CVE de Samsung Members
Les 14 CVE de Samsung Members →
CVE-2026-21037
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL…
6.9
Moyenne
CVE-2026-20985
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL…
7.0
Élevée
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary…
7.1
Élevée
CVE-2025-20949
Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write…
5.1
Moyenne