What’s Vulnerable › Vulnerabilities

CVE-2021-25341

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-04 · updated 2026-06-17
• Weakness: CWE-287

Description

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.

Affected products

• Samsung S Assistant: before 6.5.01.22 — fixed in 6.5.01.22

How to fix

Upgrade to a fixed version: Samsung S Assistant 6.5.01.22. Check the vendor advisory for mitigations.

References

• https://security.samsungmobile.com
• https://security.samsungmobile.com/serviceWeb.smsb
• https://security.samsungmobile.com
• https://security.samsungmobile.com/serviceWeb.smsb

Get alerted when CVE-2021-25341 or the next vulnerability affects your stack