CVE-2021-25353: Samsung Galaxy Themes

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.

Affected products

• Samsung Galaxy Themes: before 5.2.00.1215 (fixed in 5.2.00.1215)

Published 2021-03-25. Last modified 2026-06-17.