CVE-2021-25358: 
NixOS vulnerability analysis and mitigation

A vulnerability in Samsung mobile devices prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission through untrusted applications due to improper storage path of IMSI values (Samsung Mobile, MITRE CVE).

The vulnerability has a CVSS v3.1 base score indicating local attack vector, low attack complexity, and low privileges required. The scope is unchanged, with low confidentiality impact and no integrity or availability impacts (NVD Report).

The primary impact of this vulnerability is unauthorized access to IMSI (International Mobile Subscriber Identity) values, which could potentially lead to privacy breaches and tracking of mobile device users (MITRE CVE).

The vulnerability can be exploited by local attackers through untrusted applications without requiring special permissions. The attack complexity is considered low, making it relatively straightforward to exploit (NVD Report).

Samsung addressed this vulnerability in the SMR APR-2021 Release 1 security update. Users should update their devices to this version or later to protect against unauthorized IMSI access (Samsung Mobile).