Skip to content
OpenAdvisories
Medium · 4.5 CVE-2025-20994 EUVD-2025-16827GHSA-6w89-5w4v-7vf6

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.…

Published Jun 4, 2025 · Updated Jun 4, 2025 · Assigned by SamsungMobile

Description

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Internet — 28.0.0.59

References