CVE-2021-25413: 
NixOS vulnerability analysis and mitigation

Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data with Samsung Contacts privilege (Samsung Mobile, CVE Mitre).

The vulnerability exists in the Samsung Contacts application and involves improper sanitization of incoming intents. This allows attackers to gain unauthorized access to data accessible by the Samsung Contacts privilege level. The vulnerability has been assigned a CVSS score of 2.1, indicating low severity (Samsung Mobile).

The vulnerability allows local attackers to gain permissions to access arbitrary data that would normally only be accessible with Samsung Contacts privileges (Oversecured Blog).

The vulnerability requires local access to exploit and was patched in the Samsung Mobile Security Maintenance Release (SMR) for June 2021. There are no reports of this vulnerability being exploited in the wild (Samsung Mobile).

Samsung addressed this vulnerability in the June 2021 Security Maintenance Release (SMR). Users should update their devices to the latest available security patch level to mitigate this issue (Samsung Mobile).