CVE Watch—

CVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

CVSS

—

Sin CVSS

EPSS

2.8%

p85

KEV

SÍ

8 nov 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

2.8%EPSS · 30 días2.8%

2026-06-302026-07-17

Ficha del catálogo KEV

Producto

Samsung / Mobile Devices

Vulnerabilidad

Samsung Mobile Devices Improper Access Control Vulnerability

Añadido a KEV

8 nov 2022

Remediar antes de

29 nov 2022

Uso conocido en ransomware

Descripción resumida

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Acción requerida

Apply updates per vendor instructions.

Notas

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-21042—

95.6%

KEV—79Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2023-21492—

83.3%

KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2025-21043—

70.1%

KEV—71Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25369—

62.6%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

55.3%

KEV—67Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

52.6%

KEV—66Samsung Mobile Devices Improper Boundary Check Vulnerability—