CVE-2021-25377

—

CVSS 3.1

7.8 high

EPSS

<1%p11

Published

Apr 9, 2021 (Apr 9, 2021)

Modified

Jun 17, 2026

Description

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.

Vendors: samsung
Products: experience service
Weakness: CWE-287, CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.