Samsung EnrichedCall Implicit Intent Vulnerability Allowing Access to Sensitive Information
Vulnerability
A vulnerability exists in the EnrichedCall application on Samsung devices running Android 13, 14, or 15, prior to the May 2025 Security Maintenance Release. This vulnerability arises from the use of implicit intents for sensitive communications, which local attackers could exploit to access confidential information. Exploitation of this issue requires user interaction.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information.
Remediation
Users can apply the May 2025 Security Maintenance Release to address this vulnerability.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
3.0remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.