Description
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Nov-2025 Release in Android 13, 14, 15, 16 |
Advisories 2
- WID-SEC-2025-2496 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2025
- NCSC-2025-0353 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Nov 4, 2025