Skip to content
OpenAdvisories
Medium · 4.6 CVE-2025-21035 EUVD-2025-27692GHSA-x2rm-qv9w-2p5q

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers…

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Description

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Calendar — 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15

References