CVE-2025-21019

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability...

CVE-2025-21010

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

CVE-2025-21024

Samsung Smart View before Android 16 is affected by CVE-2025-21024 due to the use of implicit intents for sensitive communication, enabling local attackers to access sensitive information through the affected component. The issue is described across multiple sources as a vulnerability in Smart Vi...

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

CVE-2025-21023

Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information...

CVE-2025-21022

Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information...

CVE-2025-21022

CVE-2025-21022 affects Samsung Galaxy Wearable prior to 2.2.63.25042861. The issue is improper access control that could allow a local attacker to access sensitive information. Affected component is Galaxy Wearable software; root cause is access-control weakness. Mitigation seen in PT-2025-32113 ...

CVE-2025-21019

CVE-2025-21019 : Affected product is Samsung Health; versions prior to 6.30.1.003 suffer improper authorization that can allow a local attacker to access health data. The vulnerability requires user interaction to trigger. Impact is limited to data access within the Samsung Health app; no remote ...

CVE-2025-21016

Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs...

CVE-2025-21016

The CVE-2025-21016 issue affects Samsung PkgPredictorService in Chinese Android 13–16 prior to SMR Aug-2025 Release 1. The root cause is improper access control, enabling local attackers to invoke privileged APIs. Impact is limited to local privilege escalation via these privileged APIs, with doc...

CVE-2025-21015

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...

CVE-2025-21014

Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-21010

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...

CVE-2025-21010

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

PT-2025-32107 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 13 through 16 Description: Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 allows local attackers to use privileged APIs. Recommendations: Update to SMR Aug-2025 Release 1 or later...

PT-2025-32057 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices without authentication. The flaw resides in the...