Skip to content
OpenAdvisories
Medium · 5.0 CVE-2025-20996 EUVD-2025-16825GHSA-jpcf-qp67-p28c

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with …

Published Jun 4, 2025 · Updated Jun 4, 2025 · Assigned by SamsungMobile

Description

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Smart Switch — 3.7.64.10

References