CVE-2021-25405: Medium severity samsung notes vulnerability
Published Jun 11, 2021
·Updated
An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files.
Affected Software
1 affected component
Samsung Notes<4.2.04.27
Event History
Jun 11, 2021
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-25405?
CVE-2021-25405 is an improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27.
2
How does CVE-2021-25405 affect Samsung Notes?
CVE-2021-25405 allows untrusted applications to access local files in Samsung Notes prior to version 4.2.04.27.
3
What is the severity of CVE-2021-25405?
CVE-2021-25405 has a severity rating of medium (5.5).
4
How can I fix CVE-2021-25405?
To fix CVE-2021-25405, update Samsung Notes to version 4.2.04.27 or later.
5
Where can I find more information about CVE-2021-25405?
You can find more information about CVE-2021-25405 at this link: [https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5](https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5)