CVE-2021-25527

—

CVSS 3.1

3.3 low

EPSS

<1%p12

Published

Dec 8, 2021 (Dec 8, 2021)

Modified

Jun 17, 2026

Description

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.

Vendors: samsung
Products: pay
Weakness: CWE-926
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.