PT-2025-20051 · Samsung · Samsung Gallery

Sithi · Published 2024-05-24 · Updated 2025-05-07 · CVE-2025-20966

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery version 14.5.09.3 in China Android 13 Samsung Gallery version 15.5.04.5 in Android 14

Description The issue is related to improper access control in Samsung Gallery, allowing physical attackers to access data across multiple user profiles.

Recommendations For Samsung Gallery version 14.5.09.3 in China Android 13, update to a version later than 14.5.09.3. For Samsung Gallery version 15.5.04.5 in Android 14, update to a version later than 15.5.04.5. For Samsung Gallery versions prior to 14.5.10.3 in Global Android 13, update to version 14.5.10.3 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-11090

CVE-2025-20966

Affected Products

Samsung Gallery

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-20966 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11090 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20966 · Vendor Advisory
• https://twitter.com/CVEnew/status/1920038105421140160 · Twitter Post
• https://t.me/cvetracker/23242 · Telegram Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Note