- Vendor / Project
- Samsung
- Product
- Mobile Devices
- Date added
- Nov 8, 2022
- Due date
- Nov 29, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-269
Description
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.
Required action
Apply updates per vendor instructions.