Medium severity5.7NVD Advisory· Published Nov 5, 2021· Updated Jun 17, 2026

CVE-2021-25507

Description

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samsung Mobile/Samsung Flow
cpe:2.3:a:samsung:samsung_flow:*:*:*:*:*:android:*:*
Range: <4.8.03.5
Samsung Mobile/Flowllm-fuzzy
Range: <4.8.03.5
Samsung Mobile/Samsung Flow For Pccpe-rescue
Range: -

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.371
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000