Paper/Archive/CVE-2025-20968

CVE-2025-20968

Samsung Mobile Samsung Gallery — Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5…

EPSS 0.3%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 25.8.258 × 205.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operations within Samsung Gallery.

Affected

ProductAffectedFixed inSource

Samsung Gallerysee advisory14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SamsungMobile (CNA)7.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsecurity.samsungmobile.com/serviceWeb.smsb?year=2025&month=05