CVE-2021-25428: 
NixOS vulnerability analysis and mitigation

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances (Samsung Mobile, NVD).

The vulnerability is classified under CWE-269 (Improper Privilege Management) and CWE-20 (Improper Input Validation). It affects Samsung mobile devices running Android versions prior to the July 2021 Security Maintenance Release (SMR) (NVD CNA Status).

The vulnerability allows malicious applications to obtain dangerous level permissions without requiring user confirmation, potentially compromising the security model of affected Samsung devices (Samsung Mobile).

The vulnerability requires local access and can only be exploited by untrusted applications in limited circumstances. No known exploits in the wild have been reported at the time of disclosure (Samsung Mobile).

The vulnerability was addressed in the Samsung Mobile Security Maintenance Release (SMR) July-2021 Release 1. Users should update their devices to this version or later to mitigate the risk (Samsung Mobile).