CVE-2025-20899

Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1.00.5 in Android 14 allows local attackers to access sensitive information.

Score

CVSS 3.1 4.0 Medium

Status

Deferred - mobile.security@samsung.com

Published

2025-02-04

Last modified

2025-02-04

Affected products

• Pushnotification (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01