CVE-2021-25441

CVSS v3 7.8 HIGH
CVSS v2.0 4.6 MEDIUM

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

I

mproper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.

References

Link	Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7	Vendor Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:samsung:ar_emoji_editor:4.4.03.5:*:*:*:*:*:*:*

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:54

Type	Values Removed	Values Added
References	~~() https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7 - Vendor Advisory~~	() https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7 - Vendor Advisory

Information

Published : 2021-07-08 14:15

Updated : 2024-11-21 05:54

NVD link : CVE-2021-25441

Mitre link : CVE-2021-25441

CVE.ORG link : CVE-2021-25441

JSON object : View

Products Affected

android

ar_emoji_editor

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2021-25441", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2021-07-08T14:15:09.110", "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege."}, {"lang": "es", "value": "Una vulnerabilidad de comprobaci\u00f3n de entrada inapropiada en AR Emoji Editor versiones anteriores a 4.4.03.5 en Android Q(10.0) y superiores permite a aplicaciones no confiables acceder a archivos arbitrarios con un privilegio escalado"}], "lastModified": "2024-11-21T05:54:59.623", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:samsung:ar_emoji_editor:4.4.03.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5664AE73-F90E-4B14-B63D-CA971771BED2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F050AF1-DEAC-4BDB-9F7F-C940C02A4B92", "versionStartIncluding": "10.0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}