PT-2025-20052 · Samsung · Samsung Gallery

Sam Of Honor Cyber Security Lab · Published 2024-08-07 · Updated 2025-05-07 · CVE-2025-20967

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery versions prior to 14.5.09.3 in China Android 13 Samsung Gallery versions prior to 15.5.04.5 in Android 14

Description The issue is related to improper access control in Samsung Gallery, allowing attackers to read and write arbitrary files with the privilege of Samsung Gallery.

Recommendations For Samsung Gallery versions prior to 14.5.10.3 in Global Android 13, update to version 14.5.10.3 or later. For Samsung Gallery versions prior to 14.5.09.3 in China Android 13, update to version 14.5.09.3 or later. For Samsung Gallery versions prior to 15.5.04.5 in Android 14, update to version 15.5.04.5 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-13393

CVE-2025-20967

Affected Products

Samsung Gallery

References · 7

• https://bdu.fstec.ru/vul/2025-13393 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20967 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20967 · Security Note
• https://t.me/cvedetector/24702 · Telegram Post
• https://twitter.com/CVEnew/status/1920038104527724849 · Twitter Post
• https://t.me/cvetracker/23243 · Telegram Post