CVE Watch—

CVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

CVSS

—

No CVSS

EPSS

2.8%

p86

KEV

YES

Nov 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

2.8%EPSS · 30 days2.8%

2026-09-172026-10-15

KEV catalog record

Product

Samsung / Mobile Devices

Vulnerability

Samsung Mobile Devices Improper Access Control Vulnerability

Added to KEV

Nov 8, 2022

Remediate by

Nov 29, 2022

Known ransomware use

Summary description

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Required action

Apply updates per vendor instructions.

Notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-210438.8 HIG

81.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability8d CVE-2025-210428.8 HIG

98.4%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability8d CVE-2023-21492—

84.8%

KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2021-25369—

64.4%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

58.6%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

55.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—