What is CVE-2021-25403?

CVE-2021-25403 is a low-severity vulnerability in Google Android, classified under Information Disclosure. CVSS score: 3.3/10. Published 2021-06-11.

How severe is CVE-2021-25403?

Low severity. CVSS v3 base score is 3.3 out of 10.

Information disclosure in Google Android

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Vulnerability class: Information Disclosure

EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Google Android
Samsung Account — versions 12.2.0.9
Samsung Mobile Account — versions unspecified

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

mobile.security@samsung.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-25403?: CVE-2021-25403 is a low-severity vulnerability in Google Android, classified under Information Disclosure. CVSS score: 3.3/10. Published 2021-06-11.
How severe is CVE-2021-25403?: Low severity. CVSS v3 base score is 3.3 out of 10.