CVE-2021-25499: Samsung Galaxy Store

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.

Affected products

• Samsung Galaxy Store: before 4.5.32.4 (fixed in 4.5.32.4)

Published 2021-10-06. Last modified 2026-06-17.