Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-20908 EUVD-2025-6135GHSA-gqfc-m35p-wwj8

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.

Published Mar 6, 2025 · Updated Mar 6, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Mar-2025 Release in Android 14, 15

Advisories 2

References