WID-SEC-W-2025-0255

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Samsung Android: Mehrere Schwachstellen

view advisory published 2025-02-03

Ein lokaler Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-20907USmedium4.4—
Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find.
CVE-2025-20906US——
Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to enable ADB.
CVE-2025-20905USmedium6.7—
Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory.
CVE-2025-20904USmedium6.7—
Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan