Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-20975 EUVD-2025-13684GHSA-8qqq-69r5-mv6r

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activ…

Published May 7, 2025 · Updated May 7, 2025 · Assigned by SamsungMobile

Description

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege.

Affected products

VendorProductAffectedFixed
Samsung Mobile AODService — 8.8.28.12

References