PT-2025-20058 · Google+1 · Android 13+2

Joshua Birger · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-20973

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Secure Folder versions prior to 1.8.12.0 in Android 13 Secure Folder versions prior to 1.9.21.00 in Android 14

Description The issue is related to improper authentication in Secure Folder, allowing physical attackers to reset the lock type. This could potentially compromise the security of the folder.

Recommendations For Secure Folder version prior to 1.8.12.0 in Android 13, update to version 1.8.12.0 or later. For Secure Folder version prior to 1.9.21.00 in Android 14, update to version 1.9.21.00 or later.

Fix

Related Identifiers

CVE-2025-20973

Affected Products

Android 13

Android 14

Secure Folder

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20973 · Security Note
• https://twitter.com/CVEnew/status/1920038099129708988 · Twitter Post
• https://t.me/cvedetector/24700 · Telegram Post
• https://t.me/cvetracker/23249 · Telegram Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05 · Note