PT-2025-48606 · Unknown · Smart Touch Call

Published 2025-12-02 · Updated 2026-03-27 · CVE-2025-58488

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmartTouchCall versions prior to 1.0.1.1

Description A flaw exists in the verification process of communication channels within SmartTouchCall. This issue allows remote attackers to potentially access sensitive information. User interaction is necessary to trigger this issue. The vulnerable component does not properly validate the origin of communication, potentially leading to unauthorized data access.

Recommendations Update SmartTouchCall to version 1.0.1.1 or later.

Fix

Related Identifiers

CVE-2025-58488

ZDI-26-223

Affected Products

Smart Touch Call

References · 6

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58488 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-223 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58488 · Vendor Advisory
• https://twitter.com/CVEnew/status/1995688551804014866 · Twitter Post
• https://twitter.com/TheZDIBugs/status/2037626214471418253 · Twitter Post