PT-2025-35590 · Samsung · Samsung Magician

Dong-Uk Kim · Published 2025-09-02 · Updated 2025-09-05 · CVE-2025-32098

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Magician versions 6.3 through 8.3

Description An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process.

Recommendations Update Samsung Magician to a version newer than 8.3.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-32098

Affected Products

Samsung Magician

References · 7

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-32098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32098 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32098 · Vendor Advisory
• https://t.me/cveNotify/134501 · Telegram Post
• https://twitter.com/CVEnew/status/1962943356465566000 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1962959931293741565 · Twitter Post