CVE-2025-21077
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-05
Last updated on: 2025-11-07
Assigner: Samsung Mobile
Description
Description
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | to 6.2.06.0 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper input validation issue in Samsung Email versions prior to 6.2.06.0. It allows local attackers to launch arbitrary activities with the privileges of the Samsung Email application.
How can this vulnerability impact me? :
An attacker with local access could exploit this vulnerability to execute arbitrary activities within the Samsung Email app, potentially leading to unauthorized actions performed with the app's privileges. However, the impact is limited to low confidentiality impact and does not affect integrity or availability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70