CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-20962

The CVE-2025-20962 entry concerns Samsung’s SpenGesture service. Affected: SpenGesture service versions prior to SMR May-2025 Release 1. Cause: improper handling of insufficient permissions. Effect: local attackers could track the S Pen position. Mitigation: update to SMR May-2025 Release 1 or la...