CVE-2021-25357

MEDIUM

Create Movie <SMR APR-2021 Release 1 - Info Disclosure

Title source: llm

Description

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information.

References (2)

Scores

CVSS v3 5.6
EPSS 0.0002
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Classification

CWE
CWE-200 CWE-668
Status published

Affected Products (2)

google/android
google/android

Timeline

Published Apr 09, 2021
Tracked Since Feb 18, 2026