CVE-2021-25353
Summary
Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.
- LOW
- LOCAL
- NONE
- PARTIAL
- PARTIAL
- NONE
References
Advisory Timeline
- Published