CVE-2025-20996

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.

Score

CVSS 3.1 5.0 Medium

Status

Analyzed - mobile.security@samsung.com

Published

2025-06-04

Last modified

2025-06-04

Affected products

• Smart Switch (Samsung)
• Smart Switch (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=06