PT-2025-48600 · Unknown · Motionphoto

Published 2025-12-02 · Updated 2025-12-04 · CVE-2025-58482

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MotionPhoto versions prior to 4.1.51

Description An improper access control issue exists in the MPLocalService component of MotionPhoto. This allows local attackers to initiate a privileged service.

Recommendations Update MotionPhoto to version 4.1.51 or later.

Fix

Related Identifiers

CVE-2025-58482

Affected Products

Motionphoto

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-58482 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58482 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12 · Vendor Advisory
• https://twitter.com/dailycve/status/1996677737365283005 · Twitter Post
• https://twitter.com/offseq/status/1995795620930404437 · Twitter Post
• https://twitter.com/CVEnew/status/1995688558598770907 · Twitter Post