CVE-2021-25342: Samsung Members

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.

Affected products

• Samsung Members: before 2.4.81.13 (fixed in 2.4.81.13); before 3.8.00.13 (fixed in 3.8.00.13)

Published 2021-03-04. Last modified 2026-06-17.