CVE-2025-20973

Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - mobile.security@samsung.com

Published

2025-05-07

Last modified

2025-05-07

Affected products

• Secure Folder (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05