Description
Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | PENUP | — | 3.9.19.32 |
Medium · 6.2
CVE-2025-20978
EUVD-2025-13681GHSA-97ff-chjc-r365
Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.
Published May 7, 2025 · Updated May 7, 2025 · Assigned by SamsungMobile