Samsung Galaxy Themes vulnerabilities

2 CVEs affecting Samsung Galaxy Themes, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20853, published 2024-04-02.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-25353, published 2021-03-25. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the…
• CVE-2024-20853, published 2024-04-02. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.