First published: Fri Nov 05 2021(Updated: )
Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Health | <6.19.1.0001 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25506 is a vulnerability in Samsung Health prior to version 6.19.1.0001 that allows an attacker to access it via a malicious content provider or lead to denial of service.
CVE-2021-25506 affects Samsung Health versions prior to 6.19.1.0001.
The severity of CVE-2021-25506 is medium, with a CVSS severity score of 5.5.
An attacker can exploit CVE-2021-25506 by using a malicious content provider to access Samsung Health or by causing a denial of service.
To fix CVE-2021-25506, update Samsung Health to version 6.19.1.0001 or later.