← Back

CVE-2025-20968

nvd nist
Published: May 7, 2025Modified: Jan 30, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operations within Samsung Gallery.

Affected (3)

Products: Samsung: Gallery
Samsung
1 product
Gallery
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Gallery
Before 14.5.10.3
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gallery
Before 14.5.09.3
Running on/withPlatform Versions
Samsung
Android
Version 13.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gallery
Before 15.5.04.5
Running on/withPlatform Versions
Samsung
Android
Version 14.0

References (1)

Source: mobile.security@samsung.com
Vendor Advisory

Timeline

No history available yet.