Description
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Sep-2025 Release in Android 13, 14, 15, 16 |
Advisories 2
- WID-SEC-2025-1943 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2025
- NCSC-2025-0273 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Sep 4, 2025