First published: Thu Mar 04 2021(Updated: )
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Members | <2.4.81.13 | |
Google Android | =1.0 | |
Google Android | =1.1 | |
Google Android | =1.5 | |
Google Android | =1.6 | |
Google Android | =2.0 | |
Google Android | =2.0.1 | |
Google Android | =2.1 | |
Google Android | =2.2 | |
Google Android | =2.2-rev1 | |
Google Android | =2.2.1 | |
Google Android | =2.2.2 | |
Google Android | =2.2.3 | |
Google Android | =2.3 | |
Google Android | =2.3-rev1 | |
Google Android | =2.3.1 | |
Google Android | =2.3.2 | |
Google Android | =2.3.3 | |
Google Android | =2.3.4 | |
Google Android | =2.3.5 | |
Google Android | =2.3.6 | |
Google Android | =2.3.7 | |
Google Android | =3.0 | |
Google Android | =3.1 | |
Google Android | =3.2 | |
Google Android | =3.2.1 | |
Google Android | =3.2.2 | |
Google Android | =3.2.4 | |
Google Android | =3.2.6 | |
Google Android | =4.0 | |
Google Android | =4.0.1 | |
Google Android | =4.0.2 | |
Google Android | =4.0.3 | |
Google Android | =4.0.4 | |
Google Android | =4.1 | |
Google Android | =4.1.1 | |
Google Android | =4.1.2 | |
Google Android | =4.2 | |
Google Android | =4.2.1 | |
Google Android | =4.2.2 | |
Google Android | =4.3 | |
Google Android | =4.3.1 | |
Google Android | =4.4 | |
Google Android | =4.4.1 | |
Google Android | =4.4.2 | |
Google Android | =4.4.3 | |
Google Android | =4.4.4 | |
Google Android | =5.0 | |
Google Android | =5.0.1 | |
Google Android | =5.0.2 | |
Google Android | =5.1 | |
Google Android | =5.1.0 | |
Google Android | =5.1.1 | |
Google Android | =6.0 | |
Google Android | =6.0.1 | |
Google Android | =7.0 | |
Google Android | =7.1.0 | |
Google Android | =7.1.1 | |
Google Android | =7.1.2 | |
Google Android | =8.0 | |
Google Android | =8.1 | |
Samsung Members | <3.8.00.13 | |
Google Android | =9.0 | |
Google Android | =10.0 | |
Google Android | =11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25343 has a high severity rating due to its potential for unauthorized actions and denial of service attacks.
To fix CVE-2021-25343, update the Samsung Members app to version 2.4.81.13 or later.
CVE-2021-25343 affects Samsung Members versions prior to 2.4.81.13 on Android O (8.1) and below, and versions before 3.8.00.13 on Android P (9.0) and above.
The impact of CVE-2021-25343 includes unauthorized access to app services and potential service disruptions.
There are no documented workarounds for CVE-2021-25343; the only resolution is to update the affected app.