Paper/Archive/CVE-2025-20967

CVE-2025-20967

Samsung Mobile Samsung Gallery — Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5…

EPSS 0.2%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 11.5.115 × 202.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege of Samsung Gallery.

Affected

ProductAffectedFixed inSource

Samsung Gallerysee advisory14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SamsungMobile (CNA)5.1CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.samsungmobile.com/serviceWeb.smsb?year=2025&month=05