CVE-2025-20946
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: mobile.security@samsung.com (Secondary)
Description
Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction.
Affected (1)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0 |
| Running on/with | Platform Versions |
|---|---|
Samsung Galaxy Watch | All versions |
Samsung Galaxy Watch 4 | All versions |
Samsung Galaxy Watch 4 Classic | All versions |
Samsung Galaxy Watch 5 | All versions |
Samsung Galaxy Watch 5 Pro | All versions |
Samsung Galaxy Watch 6 | All versions |
Samsung Galaxy Watch 6 Classic | All versions |
Samsung Galaxy Watch 7 | All versions |
Samsung Galaxy Watch Fe | All versions |
Samsung Galaxy Watch Ultra | All versions |
References (1)
Source: mobile.security@samsung.com
Vendor Advisory
Timeline
No history available yet.