CVE-2025-20895

The CVE-2025-20895 affects Samsung Galaxy Store prior to 4.5.87.6. The issue permits authentication bypass via an alternate path in Galaxy Store, enabling a physical attacker to install arbitrary apps and bypass Setupwizard restrictions. Affected: Galaxy Store versions before 4.5.87.6. Root cause...

CVE-2021-25356

An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application...

CVE-2021-25356

CVE-2021-25356 pertains to Samsung’s Managed Provisioning. An improper caller check prior to SMR APR-2021 Release 1 allows an unprivileged application to install arbitrary applications, grant device admin permissions, and subsequently delete multiple installed apps. The issue’s root cause is an i...