CVE-2021-25336

LOW

Samsung mobile <SMR Mar-2021 Release 1 - Privilege Escalation

Title source: llm

Description

Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://security.samsungmobile.com/securityUpdate.smsb

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com

Scores

CVSS v3 2.8

EPSS 0.0024

EPSS Percentile 15.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Details

CWE

CWE-269

Status published

Products (2)

google/android 9.0

google/android 10.0

Published Mar 04, 2021

Tracked Since Feb 18, 2026