CVE-2021-25441 Vulnerability Details

  /     /     /  

CVE-2021-25441 Metadata Quick Info

CVE Published: 08/07/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: Samsung Mobile | Vendor: Samsung Mobile | Product: AR Emoji Editor
Status : PUBLISHED

---

CVE-2021-25441 Description

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-20
CWE Name: CWE-20: Improper Input Validation
Source: Samsung Mobile

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).