description: Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.
problem types: Improper Control of Generation of Code ('Code Injection')
affected:
{
product: Samsung Mobile Devices
vendor: n/a
versions:
status: affected, version: Selected Q(10.0) prior to SMR Feb-2021 Release 1
}