Read the docs
TI-2021-07680 Aliases CVE-2021-25441GHSA-xj87-rp3c-q5f4

Improper input validation in Samsung AR Emoji Editor

Priority LOW 34CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.

Why it matters now

EPSS 0.00246 15th percentileScored 2026-11-07
Fix Fixed AR Emoji Editor (Samsung Mobile): 4.4.03.5 in Android Q(10.0) and above

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungAR Emoji Editor- to before 4.4.03.5 in Android Q(10.0) and above4.4.03.5 in Android Q(10.0) and abovePatch availableCNA
  • AR Emoji Editor VendorSamsung Affected - to before 4.4.03.5 in Android Q(10.0) and above Fixed in 4.4.03.5 in Android Q(10.0) and above Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:samsung:ar_emoji_editor:4.4.03.5:*:*:*:*:*:*:*4.4.03.5VulnerableSamsung
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*10.0Running onGoogle
  • cpe:2.3:a:samsung:ar_emoji_editor:4.4.03.5:*:*:*:*:*:*:* Versions 4.4.03.5 Vulnerable ·Samsung
  • cpe:2.3:o:google:android:*:*:*:*:*:*:*:* Versions 10.0 Running on ·Google

Remediation

  • Fix · CNA AR Emoji Editor (Samsung Mobile) Fixed in 4.4.03.5 in Android Q(10.0) and above

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-25441
  2. 2026-10-03 Alias added: GHSA-xj87-rp3c-q5f4

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences