Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-21049 EUVD-2025-33682GHSA-274v-224f-5f86

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interac…

Published Oct 10, 2025 · Updated Oct 10, 2025 · Assigned by SamsungMobile

Description

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Oct-2025 Release in Android 15, 16

Advisories 1

References