CVE-2021-25343

—

CVSS 3.1

3.3 low

EPSS

<1%p12

Published

Mar 4, 2021 (Mar 4, 2021)

Modified

Jun 17, 2026

Description

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Vendors: samsung
Products: members
Weakness: CWE-287
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.