High WID-SEC-2025-0960 13 CVEs

Samsung Android: Mehrere Schwachstellen

Published May 6, 2025 · Updated May 6, 2025 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um sich erweiterte Rechte zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen preiszugeben oder Daten zu manipulieren.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 13

High 7.3

CVE-2025-20957

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary ac…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 6.7

CVE-2025-20937

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write ou…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 6.6

CVE-2025-20963

Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to …

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 6.6

CVE-2025-20964

Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to wr…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 5.5

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attacke…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 5.5

CVE-2025-20955

Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 a…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 5.5

CVE-2025-20961

Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows l…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 5.1

CVE-2025-20953

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities w…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 5.1

CVE-2025-20959

Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local at…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 4.4

CVE-2025-20958

Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attack…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 4.3

CVE-2025-20956

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows ph…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 4.0

CVE-2025-20960

Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attacke…

Samsung Mobile Samsung Mobile Devices

May 7, 2025
Medium 4.0

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attack…

Samsung Mobile Samsung Mobile Devices

May 7, 2025

Revision history

2025-05-06 #1
Initiale Fassung

References

Samsung Security Update vom 2025-05-06
https://security.samsungmobile.com/securityUpdate.smsb