PT-2025-4179 · Google+1 · Android 12+3

Dawuge · Published 2025-02-04 · Updated 2025-02-04 · CVE-2025-20897

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Secure Folder versions prior to 1.9.20.50 in Android 14 Secure Folder versions prior to 1.8.11.0 in Android 13 Secure Folder versions prior to 1.7.04.0 in Android 12

Description The issue is related to improper access control in Secure Folder, allowing a local attacker to access data.

Recommendations For Secure Folder version prior to 1.9.20.50 in Android 14, update to version 1.9.20.50 or later. For Secure Folder version prior to 1.8.11.0 in Android 13, update to version 1.8.11.0 or later. For Secure Folder version prior to 1.7.04.0 in Android 12, update to version 1.7.04.0 or later.

Fix

Related Identifiers

CVE-2025-20897

Affected Products

Android 12

Android 13

Android 14

Secure Folder

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20897 · Security Note
• https://twitter.com/CVEnew/status/1886680224584421572 · Twitter Post
• https://t.me/cvedetector/17166 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1886728187868057750 · Twitter Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01 · Note