Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-21026 EUVD-2025-27690GHSA-gjvm-23w4-3q2x

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Sep-2025 Release in Android 13, 14, 15, 16

Advisories 2

References