CVE-2021-25428

Summary

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesO(8.1), P(9.0), Q(10.0), R(11.0) < SMR July-2021 Release 1affected

Weaknesses

  • CWE-269: CWE-269: Improper Privilege Management

ADP Enrichment

CVE Program Container

Additional References

References