CVE-2025-20951

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-20951

5.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

I

mproper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.

References
Link Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=04 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*
History

17 Jul 2025, 18:16

Type Values Removed Values Added
First Time Samsung
Samsung galaxy Store
CPE cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=04 - () https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=04 - Vendor Advisory

08 Apr 2025, 18:13

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de verificación incorrecta de la intención por parte del receptor de transmisión en Galaxy Store anterior a la versión 4.5.90.7 permite a atacantes locales escribir archivos arbitrarios con el privilegio de Galaxy Store.

08 Apr 2025, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-08 05:15

Updated : 2025-07-17 18:16

NVD link : CVE-2025-20951

Mitre link : CVE-2025-20951

CVE.ORG link : CVE-2025-20951

JSON object : View

Products Affected

samsung

CWE
NVD-CWE-Other