Actively exploited in the wild
Samsung Mobile Devices Improper Access Control Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2022-11-08. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-25337
MediumCVSS 4.4KEVSummary
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.
Risk Assessment
Untrusted applications could access sensitive files, potentially leading to data leakage or unauthorized modifications.
Recommendation
Update the device to SMR Mar-2021 Release 1 or later to fix the vulnerability.
Other vulnerabilities in Samsung mobile devices
Original NVD description (English source)
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.