CVE-2021-25337

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

Remediation deadline: November 29, 2022

Description

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Timeline

Published:November 8th, 2022 12:00 AM

Last modified:November 8th, 2022 12:00 AM

Added to KEV:November 8th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Samsung

Products

Mobile Devices

Weaknesses (CWE)

CWE-269

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute