Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-21033 EUVD-2025-26618GHSA-27f6-pqf6-f8qx

Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Sep-2025 Release in Android 14, 15

Advisories 2

References