All CVE records

CVE-2021-25337 — Samsung Mobile Devices Improper Access Control Vulnerability

CISA KEV listed Added November 8, 2022 Remediate by November 29, 2022

Description

Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Required action

Apply updates per vendor instructions.

Notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer