PT-2025-23747 · Unknown · Thememanager

Xdek42 · Published 2025-06-04 · Updated 2026-02-10 · CVE-2025-20985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ThemeManager versions prior to SMR Jun-2025 Release 1

Description The issue is related to improper privilege management, allowing local privileged attackers to reuse trial items. This could potentially be exploited by attackers with local access.

Recommendations For versions prior to SMR Jun-2025 Release 1, update to SMR Jun-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ThemeManager to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2025-20985

Affected Products

Thememanager

References · 6

• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20985 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20985 · Vendor Advisory
• https://twitter.com/CVEnew/status/1930131538374521182 · Twitter Post
• https://t.me/cvetracker/25353 · Telegram Post
• https://t.me/cveNotify/151648 · Telegram Post