VDB

CVE-2021-25410

CVE-2021-25410 PUBLISHED CVSS 7.099999904632568 HIGH

Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.

EPSS 0.17% · 6.6th percentile

Risk Scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.17%
6.6th percentile

Affected Products

VendorProductVersions
googleandroid11.0
Samsung MobileSamsung Mobile Devices*

Timeline

  • Jun 11, 2021 CVE Published
  • Jun 12, 2021 EPSS Score
  • Aug 13, 2021 EPSS Score
  • Oct 13, 2021 EPSS Score
  • Dec 13, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 13, 2022 EPSS Score
  • Jun 13, 2022 EPSS Score
  • Aug 14, 2022 EPSS Score
  • Oct 14, 2022 EPSS Score
  • Dec 14, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›