Description
Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.
Scores
CVSS v3
3.8
EPSS
0.0006
EPSS Percentile
17.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Details
CWE
CWE-926
Status
published
Products (1)
samsung/pay
< 4.1.77
Published
Dec 08, 2021
Tracked Since
Feb 18, 2026