CVE Watch—

CVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

CVSS

—

Sem CVSS

EPSS

2.8%

p87

KEV

SIM

8 de nov. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

2.8%EPSS · 30 dias2.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Samsung / Mobile Devices

Vulnerabilidade

Samsung Mobile Devices Improper Access Control Vulnerability

Adicionado ao KEV

8 de nov. de 2022

Corrigir até

29 de nov. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Ação necessária

Apply updates per vendor instructions.

Notas

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-210438.8 ALT

82.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability29d CVE-2025-210428.8 ALT

98.5%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability29d CVE-2023-21492—

85.1%

KEV—76Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2021-25369—

65.2%

KEV—70Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

59.5%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

56.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—