CVE-2021-25337

Samsung Mobile Devices

Published 4 Mar 2021 · updated 17 Jun 2026 · Analyzed

7.1 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Nov 2022, with a remediation deadline of 29 Nov 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

References

security.samsungmobile.com/ · Vendor Advisory
security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25337 · US Government Resource