CVE-2025-20968

Samsung Gallery CVE-2025-20968 is due to improper access control in Gallery prior to version 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13), and 15.5.04.5 (Android 14). This allows remote attackers to access data and perform internal operations within the app. Affected versions are p...

CVE-2021-25379

Samsung Gallery (Android) prior to version 5.4.16.1 is affected by an intent-redirection elevation-of-privilege vulnerability. The issue allows an attacker to trigger privileged actions within the app. Public sources consistently describe the flaw as an elevation of privilege via intent redirecti...

CVE-2025-20966

CVE-2025-20966 affects Samsung Gallery; vulnerable is improper access control in versions: Global Android 13 ≤ 14.5.10.3, China Android 13 ≤ 14.5.09.3, and Android 14 ≤ 15.5.04.5. Root cause: improper access control enabling cross-profile data access by physical attackers. Impact: exposure of dat...

CVE-2025-20967

The CVE-2025-20967 case concerns Samsung Gallery. Affected versions expose improper access control in Global Android 13 (pre-14.5.10.3), China Android 13 (pre-14.5.09.3), and Android 14 (pre-15.5.04.5), allowing an attacker to read and write arbitrary files with Samsung Gallery privileges. The un...

CVE-2023-30724

CVE-2023-30724 affects Gallery prior to version 14.5.01.2, where improper authentication in GallerySearchProvider can allow an attacker to access search history. This vulnerability is documented across multiple sources (NVD, Red Hat, PRION, CVE lists) with consistent impact described as local acc...

CVE-2025-20969

CVE-2025-20969 affects Samsung Gallery: improper input validation allows a local attacker to access data within the app. Affected versions are pre-14.5.10.3 (Global Android 13), pre-14.5.09.3 (China Android 13), and pre-15.5.04.5 (Android 14). Remediation: update to 14.5.10.3+/14.5.09.3+/15.5.04....

CVE-2024-20827

Summary: Samsung Gallery vulnerable to improper access control, enabling physical attackers to view pictures on the lockscreen via a physical keyboard. Affected software: Samsung Gallery, versions prior to 14.5.04.4. Root cause: improper access control, leading to confidentiality impact (C:H) per...

CVE-2023-30725

CVE-2023-30725 pertains to Samsung Gallery’s LocalProvider vulnerability where improper authentication could allow a local attacker to access data stored in the content provider. Affected software/version: Gallery prior to 14.5.01.2. Root cause: weak authentication in the LocalProvider. Impact: p...