CVE-2021-25375: Infoleak
Published Apr 9, 2021
·Updated
Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment.
Affected Software
1 affected component
Samsung Email<6.1.14.0
Event History
Apr 9, 2021
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-25375?
CVE-2021-25375 is a vulnerability in Samsung Email that allows remote attackers to get attachments of other emails when users open a malicious attachment.
2
How severe is CVE-2021-25375?
CVE-2021-25375 has a severity score of 6.5 (medium).
3
Which version of Samsung Email is affected by CVE-2021-25375?
Samsung Email prior to version 6.1.41.0 is affected by CVE-2021-25375.
4
How can remote attackers exploit CVE-2021-25375?
Remote attackers can exploit CVE-2021-25375 by using a predictable index for attachments in Samsung Email.
5
Where can I get more information about CVE-2021-25375?
You can check the official Samsung Mobile Security website for more information about CVE-2021-25375.