Skip to content
OpenAdvisories
Medium · 4.9 CVE-2025-20995 EUVD-2025-16826GHSA-wfqc-2q3r-7qcf

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.…

Published Jun 4, 2025 · Updated Jun 4, 2025 · Assigned by SamsungMobile

Description

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Internet — 28.0.0.59

References