Gallery CVE-2021-25379

LOW

Improper Export of Android Application Components (CWE-926)

2021-04-09 mobile.security@samsung.com

Information Disclosure Gallery

3.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Apr 09, 2021 - 18:15 nvd

LOW 3.3

DescriptionNVD

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.

AnalysisAI

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-926. Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action. Affected products include: Samsung Gallery. Version information: version 5.4.16.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Gallery

View all

CVE-2016-1000113 CRITICAL Act Now POC

XSS and SQLi in huge IT gallery v1.1.5 for Joomla. Rated critical severity (CVSS 9.8), this vulnerability is remotely ex

CVE-2023-0765 HIGH This Week POC

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to

CVE-2013-2240 HIGH This Week POC

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers

CVE-2016-1000114 MEDIUM This Month POC

XSS in huge IT gallery v1.1.5 for Joomla. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable,

CVE-2022-1946 MEDIUM This Month POC

The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the resp

CVE-2012-2405 CRITICAL Act Now

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attac

CVE-2023-0764 MEDIUM This Month POC

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, le

CVE-2024-35750 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevart Responsiv

CVE-2013-2138 HIGH This Week

The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fra

CVE-2012-4343 HIGH This Week

Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown

CVE-2025-20968 HIGH This Week

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 1

CVE-2024-30550 HIGH This Week

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsiv

Same weakness CWE-926 – Improper Export of Android Application Components

View all

CVE-2025-15464 HIGH POC

CVE-2021-25397 MEDIUM POC

CVE-2024-13917 HIGH

CVE-2025-68713 HIGH

CVE-2021-25391 MEDIUM POC

CVE-2021-25390 MEDIUM POC

CVE-2025-32347 HIGH

CVE-2021-25400 HIGH

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2021-25379 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy