CVE-2021-25377: Samsung Experience Service

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.

Affected products

• Samsung Experience Service: up to and including 10.8.0.4; from 12.2.0.5

Published 2021-04-09. Last modified 2026-06-17.