PT-2025-20055 · Samsung · Bixby Vision

011100101001 · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-20970

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bixby Vision versions prior to 3.8.1 in Android 13 Bixby Vision versions prior to 3.8.3 in Android 14 Bixby Vision versions prior to 3.8.21 in Android 15

Description The issue is related to improper access control in Bixby Vision, allowing local attackers to access image files with Bixby Vision privilege.

Recommendations For versions prior to 3.8.1 in Android 13, update to version 3.8.1 or later. For versions prior to 3.8.3 in Android 14, update to version 3.8.3 or later. For versions prior to 3.8.21 in Android 15, update to version 3.8.21 or later.

Fix

Related Identifiers

CVE-2025-20970

Affected Products

Bixby Vision

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-20970 · Security Note
• https://twitter.com/VulmonFeeds/status/1920129464354148809 · Twitter Post
• https://t.me/cvetracker/23246 · Telegram Post
• https://t.me/cvedetector/24703 · Telegram Post
• https://twitter.com/CVEnew/status/1920038101843370029 · Twitter Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Note