CWE-925 · Access Control
Improper Verification of Intent by Broadcast Receiver
19CVEs
SortMost likely exploited
19 CVEs with CWE-925 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-42543Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege.Samsung Mobile · Bixby Voice · CVSS 6.2 · 2023-11-07 | 6.2 | 0.5% | 2023-11-07 |
| CVE-2026-33173Rails Active Storage has possible content type bypass via metadata in direct uploadsrails · activestorage · CVSS 5.3 · 2026-03-23 | 5.3 | 0.4% | 2026-03-23 |
| CVE-2024-10576Unauthorized factory reset of Infinix devicesInfinix Mobile · com.transsion.agingfunction · CVSS 9.4 · 2024-12-04 | 9.4 | 0.2% | 2024-12-04 |
| CVE-2024-20853Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.Samsung Mobile · ThemeStore · CVSS 5.1 · 2024-04-02 | 5.1 | 0.2% | 2024-04-02 |
| CVE-2026-21106Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.Samsung Mobile · Samsung Cloud Assistant · CVSS 5.1 · 2026-09-09 | 5.1 | 0.2% | 2026-09-09 |
| CVE-2024-20870Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of…Samsung Mobile · Galaxy Store · CVSS 5.1 · 2024-05-07 | 5.1 | 0.1% | 2024-05-07 |
| CVE-2025-20951Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of…Samsung Mobile · Galaxy Store · CVSS 5.1 · 2025-04-08 | 5.1 | 0.1% | 2025-04-08 |
| CVE-2025-20942Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local attackers to reset OAID.Samsung Mobile · Samsung Mobile Devices · CVSS 4.4 · 2025-04-08 | 4.4 | 0.1% | 2025-04-08 |
| CVE-2024-20852Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration.Samsung Mobile · SmartThings · CVSS 5.9 · 2024-04-02 | 5.9 | 0.1% | 2024-04-02 |
| CVE-2025-20972Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.Samsung Mobile · Samsung Flow · CVSS 6.2 · 2025-05-07 | 6.2 | 0.1% | 2025-05-07 |
| CVE-2023-44126Call management - Implicit intents disclose telephony data such as phone numbers, call states, contactsLG Electronics · LG V60 Thin Q 5G(LMV600VM) · CVSS 3.6 · 2023-09-27 | 3.6 | 0.1% | 2023-09-27 |
| CVE-2024-34600Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage.Samsung Mobile · Samsung Flow · CVSS 4.4 · 2024-07-02 | 4.4 | 0.1% | 2024-07-02 |
| CVE-2025-20958Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoWiFi related behaviors.Samsung Mobile · Samsung Mobile Devices · CVSS 4.4 · 2025-05-07 | 4.4 | 0.1% | 2025-05-07 |
| CVE-2024-34601Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore.Samsung Mobile · GalaxyStore · CVSS 5.9 · 2024-07-02 | 5.9 | 0.1% | 2024-07-02 |
| CVE-2025-21040Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.Samsung Mobile · S Assistant · CVSS 5.1 · 2025-09-03 | 5.1 | 0.1% | 2025-09-03 |
| CVE-2025-21039Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.Samsung Mobile · S Assistant · CVSS 5.1 · 2025-09-03 | 5.1 | 0.1% | 2025-09-03 |
| CVE-2025-21038Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.Samsung Mobile · S Assistant · CVSS 5.1 · 2025-09-03 | 5.1 | 0.1% | 2025-09-03 |
| CVE-2025-21027Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.Samsung Mobile · Samsung Mobile Devices · CVSS 5.1 · 2025-09-03 | 5.1 | 0.1% | 2025-09-03 |
| CVE-2026-20988Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User…Samsung Mobile · Samsung Mobile Devices · CVSS 6.8 · 2026-03-16 | 6.8 | 0.1% | 2026-03-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.