CVE-2021-25427

Summary

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesO(8.1), P(9.0), Q(10.0), R(11.0) < SMR July-2021 Release 1affected

Weaknesses

  • CWE-89: CWE-89: Improper Neutralization of Special Elements used in an SQL Command

ADP Enrichment

CVE Program Container

Additional References

References