Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data with Samsung Contacts privilege.
| Software | From | Fixed in |
|---|---|---|
| google / android | 9.0 | 9.0.x |
| google / android | 10.0 | 10.0.x |
| google / android | 11.0 | 11.0.x |