CVE Watch—

CVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

CVSS

—

Sin CVSS

EPSS

2.8%

p86

KEV

SÍ

8 nov 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

2.8%EPSS · 30 días2.8%

2026-09-182026-10-15

Ficha del catálogo KEV

Producto

Samsung / Mobile Devices

Vulnerabilidad

Samsung Mobile Devices Improper Access Control Vulnerability

Añadido a KEV

8 nov 2022

Remediar antes de

29 nov 2022

Uso conocido en ransomware

Descripción resumida

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Acción requerida

Apply updates per vendor instructions.

Notas

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-210438.8 ALT

81.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability8d CVE-2025-210428.8 ALT

98.4%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability9d CVE-2023-21492—

84.8%

KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2021-25369—

64.4%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

58.6%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

55.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—