First published: Thu Mar 04 2021(Updated: )
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Members | <2.4.81.13 | |
Google Android | =1.0 | |
Google Android | =1.1 | |
Google Android | =1.5 | |
Google Android | =1.6 | |
Google Android | =2.0 | |
Google Android | =2.0.1 | |
Google Android | =2.1 | |
Google Android | =2.2 | |
Google Android | =2.2-rev1 | |
Google Android | =2.2.1 | |
Google Android | =2.2.2 | |
Google Android | =2.2.3 | |
Google Android | =2.3 | |
Google Android | =2.3-rev1 | |
Google Android | =2.3.1 | |
Google Android | =2.3.2 | |
Google Android | =2.3.3 | |
Google Android | =2.3.4 | |
Google Android | =2.3.5 | |
Google Android | =2.3.6 | |
Google Android | =2.3.7 | |
Google Android | =3.0 | |
Google Android | =3.1 | |
Google Android | =3.2 | |
Google Android | =3.2.1 | |
Google Android | =3.2.2 | |
Google Android | =3.2.4 | |
Google Android | =3.2.6 | |
Google Android | =4.0 | |
Google Android | =4.0.1 | |
Google Android | =4.0.2 | |
Google Android | =4.0.3 | |
Google Android | =4.0.4 | |
Google Android | =4.1 | |
Google Android | =4.1.1 | |
Google Android | =4.1.2 | |
Google Android | =4.2 | |
Google Android | =4.2.1 | |
Google Android | =4.2.2 | |
Google Android | =4.3 | |
Google Android | =4.3.1 | |
Google Android | =4.4 | |
Google Android | =4.4.1 | |
Google Android | =4.4.2 | |
Google Android | =4.4.3 | |
Google Android | =4.4.4 | |
Google Android | =5.0 | |
Google Android | =5.0.1 | |
Google Android | =5.0.2 | |
Google Android | =5.1 | |
Google Android | =5.1.0 | |
Google Android | =5.1.1 | |
Google Android | =6.0 | |
Google Android | =6.0.1 | |
Google Android | =7.0 | |
Google Android | =7.1.0 | |
Google Android | =7.1.1 | |
Google Android | =7.1.2 | |
Google Android | =8.0 | |
Samsung Members | <3.8.00.13 | |
Google Android | =9.0 | |
Google Android | =10.0 | |
Google Android | =11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25342 has been evaluated as a high-severity vulnerability due to its potential for unauthorized actions and denial of service attacks.
To mitigate CVE-2021-25342, upgrade the Samsung Members application to version 3.0.9 or later.
Exploitation of CVE-2021-25342 allows unauthorized actions, which may lead to service disruption or denial of service.
CVE-2021-25342 impacts Samsung Members versions prior to 3.0.9, as well as earlier versions up to 2.4.81.13.
Devices utilizing affected versions of the Samsung Members application prior to 3.0.9 may be vulnerable to CVE-2021-25342.