Insecure Storage Vulnerability in Smart Capture by Samsung
CVE-2021-25522

5.3MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Capture
Vendor
CVE Published:
8 December 2021

What is CVE-2021-25522?

An insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 exposes collected images to unauthorized access. Attackers may exploit this flaw to retrieve images captured by the application, compromising the privacy of users. It is essential for users to update to later versions to ensure the security of their sensitive data.

Affected Version(s)

Samsung Capture - < 4.8.02.10

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.