PT-2025-15337 · Unknown · Clipboardservice

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-20935

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ClipboardService versions prior to 1

Description: The issue is related to the improper handling of insufficient permission or privileges in ClipboardService. This allows local attackers to access files with system privilege. User interaction is required for triggering this issue.

Recommendations: For versions prior to 1, update to version 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ClipboardService to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2025-20935

Affected Products

Clipboardservice

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20935 · Security Note
• https://t.me/cvenotify/118158 · Telegram Post
• https://twitter.com/CVEnew/status/1909528325896499206 · Twitter Post
• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=04 · Note
• https://twitter.com/VulmonFeeds/status/1909586810159739387 · Twitter Post