PT-2025-20053 · Samsung · Samsung Gallery

Dawuge · Published 2024-08-07 · Updated 2025-05-12 · CVE-2025-20968

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery versions prior to 14.5.09.3 in China Android 13 Samsung Gallery versions prior to 15.5.04.5 in Android 14

Description The issue is related to improper access control in Samsung Gallery, allowing remote attackers to access data and perform internal operations within the application.

Recommendations For Samsung Gallery version prior to 14.5.10.3 in Global Android 13, update to version 14.5.10.3 or later. For Samsung Gallery version prior to 14.5.09.3 in China Android 13, update to version 14.5.09.3 or later. For Samsung Gallery version prior to 15.5.04.5 in Android 14, update to version 15.5.04.5 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-13394

CVE-2025-20968

Affected Products

Samsung Gallery

References · 10

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20968 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20968 · Security Note
• https://t.me/cvetracker/23244 · Telegram Post
• https://twitter.com/cracbot/status/1921883142891188619 · Twitter Post
• https://twitter.com/cybercronai/status/1920135423323513202 · Twitter Post
• https://t.me/cvedetector/24696 · Telegram Post
• https://twitter.com/cybercronai/status/1920150691563094164 · Twitter Post
• https://twitter.com/CVEnew/status/1920038103659515993 · Twitter Post