CVE-2021-25342

Summary

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSMP sdkunspecified < 3.0.9affected

Weaknesses

  • CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

References