CVE-2021-25403: Samsung Account

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Affected products

• Samsung Account: before 10.8.0.4 (fixed in 10.8.0.4); version 12.2.0.9 only

Published 2021-06-11. Last modified 2026-06-17.