Samsung Mobile Devices Improper Access Control Vulnerability
Samsung · Mobile Devices
Date added (CISA)
2022-11-08
Remediation due
2022-11-29
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.