CVE-2021-25332

—

CVSS 3.1

2.4 low

EPSS

<1%p17

Published

Mar 4, 2021 (Mar 4, 2021)

Modified

Jun 17, 2026

Description

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition.

Vendors: samsung
Products: pay mini
Weakness: CWE-200
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.