Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-21028 EUVD-2025-26510GHSA-89xc-2rc9-gcgc

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Sep-2025 Release in Android 15, 16

Advisories 2

References