Live › vulnerability › CVE-2021-25337
Go to dashboardSamsung mobile devices have an improper access control flaw in the clipboard service that lets untrusted apps read or write arbitrary files. It was chained with CVE-2021-25369 and CVE-2021-25370, and CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Samsung Mobile Devices | vendor | – | – |
| samsung android | vendor | = 9.0 | – |
| samsung android | vendor | = 10.0 | – |
| samsung android | vendor | = 11.0 | – |
Settings > Software update > check the security patch level on each Samsung device; unknown whether the sources give a specific build number.
Apply the Samsung security update for your device model per vendor instructions; the sources do not name a specific patched version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-25337")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.