CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Android.
CVE
CVE-2021-25373
Severity
MEDIUM
CVSS
5.5
EPSS
0.21%
Android
Original NVD Description
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Related CVEs
Other vulnerabilities affecting the same vendor(s)