CVE-2025-20884: Medium severity samsung android vulnerability
Published Feb 4, 2025
·Updated
Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles.
Affected Software
118 affected components
Samsung android=12.0
Samsung android=12.0-smr-apr-2022-r1
Samsung android=12.0-smr-apr-2023-r1
Samsung android=12.0-smr-apr-2024-r1
Samsung android=12.0-smr-aug-2022-r1
Samsung android=12.0-smr-aug-2023-r1
Samsung android=12.0-smr-aug-2024-r1
Samsung android=12.0-smr-dec-2021-r1
Samsung android=12.0-smr-dec-2022-r1
Samsung android=12.0-smr-dec-2023-r1
Samsung android=12.0-smr-dec-2024-r1
Samsung android=12.0-smr-feb-2022-r1
Samsung android=12.0-smr-feb-2023-r1
Samsung android=12.0-smr-feb-2024-r1
Samsung android=12.0-smr-jan-2022-r1
Samsung android=12.0-smr-jan-2023-r1
Samsung android=12.0-smr-jan-2024-r1
Samsung android=12.0-smr-jul-2022-r1
Samsung android=12.0-smr-jul-2023-r1
Samsung android=12.0-smr-jul-2024-r1
Samsung android=12.0-smr-jun-2022-r1
Samsung android=12.0-smr-jun-2023-r1
Samsung android=12.0-smr-jun-2024-r1
Samsung android=12.0-smr-mar-2022-r1
Samsung android=12.0-smr-mar-2023-r1
Samsung android=12.0-smr-mar-2024-r1
Samsung android=12.0-smr-may-2022-r1
Samsung android=12.0-smr-may-2023-r1
Samsung android=12.0-smr-may-2024-r1
Samsung android=12.0-smr-nov-2021-r1
Samsung android=12.0-smr-nov-2022-r1
Samsung android=12.0-smr-nov-2023-r1
Samsung android=12.0-smr-nov-2024-r1
Samsung android=12.0-smr-oct-2022-r1
Samsung android=12.0-smr-oct-2023-r1
Samsung android=12.0-smr-oct-2024-r1
Samsung android=12.0-smr-sep-2022-r1
Samsung android=12.0-smr-sep-2023-r1
Samsung android=12.0-smr_sep-2024-r1
Samsung android=13.0
Samsung android=13.0-smr-apr-2022-r1
Samsung android=13.0-smr-apr-2023-r1
Samsung android=13.0-smr-apr-2024-r1
Samsung android=13.0-smr-aug-2022-r1
Samsung android=13.0-smr-aug-2023-r1
Samsung android=13.0-smr-aug-2024-r1
Samsung android=13.0-smr-dec-2021-r1
Samsung android=13.0-smr-dec-2022-r1
Samsung android=13.0-smr-dec-2023-r1
Samsung android=13.0-smr-dec-2024-r1
Samsung android=13.0-smr-feb-2022-r1
Samsung android=13.0-smr-feb-2023-r1
Samsung android=13.0-smr-feb-2024-r1
Samsung android=13.0-smr-jan-2022-r1
Samsung android=13.0-smr-jan-2023-r1
Samsung android=13.0-smr-jan-2024-r1
Samsung android=13.0-smr-jul-2022-r1
Samsung android=13.0-smr-jul-2023-r1
Samsung android=13.0-smr-jul-2024-r1
Samsung android=13.0-smr-jun-2022-r1
Samsung android=13.0-smr-jun-2023-r1
Samsung android=13.0-smr-jun-2024-r1
Samsung android=13.0-smr-mar-2022-r1
Samsung android=13.0-smr-mar-2023-r1
Samsung android=13.0-smr-mar-2024-r1
Samsung android=13.0-smr-may-2022-r1
Samsung android=13.0-smr-may-2023-r1
Samsung android=13.0-smr-may-2024-r1
Samsung android=13.0-smr-nov-2021-r1
Samsung android=13.0-smr-nov-2022-r1
Samsung android=13.0-smr-nov-2023-r1
Samsung android=13.0-smr-nov-2024-r1
Samsung android=13.0-smr-oct-2022-r1
Samsung android=13.0-smr-oct-2023-r1
Samsung android=13.0-smr-oct-2024-r1
Samsung android=13.0-smr-sep-2022-r1
Samsung android=13.0-smr-sep-2023-r1
Samsung android=13.0-smr-sep-2024-r1
Samsung android=14.0
Samsung android=14.0-smr-apr-2022-r1
Samsung android=14.0-smr-apr-2023-r1
Samsung android=14.0-smr-apr-2024-r1
Samsung android=14.0-smr-aug-2022-r1
Samsung android=14.0-smr-aug-2023-r1
Samsung android=14.0-smr-aug-2024-r1
Samsung android=14.0-smr-dec-2021-r1
Samsung android=14.0-smr-dec-2022-r1
Samsung android=14.0-smr-dec-2023-r1
Samsung android=14.0-smr-dec-2024-r1
Samsung android=14.0-smr-feb-2022-r1
Samsung android=14.0-smr-feb-2023-r1
Samsung android=14.0-smr-feb-2024-r1
Samsung android=14.0-smr-jan-2022-r1
Samsung android=14.0-smr-jan-2023-r1
Samsung android=14.0-smr-jan-2024-r1
Samsung android=14.0-smr-jul-2022-r1
Samsung android=14.0-smr-jul-2023-r1
Samsung android=14.0-smr-jul-2024-r1
Samsung android=14.0-smr-jun-2022-r1
Samsung android=14.0-smr-jun-2023-r1
Samsung android=14.0-smr-jun-2024-r1
Samsung android=14.0-smr-mar-2022-r1
Samsung android=14.0-smr-mar-2023-r1
Samsung android=14.0-smr-mar-2024-r1
Samsung android=14.0-smr-may-2022-r1
Samsung android=14.0-smr-may-2023-r1
Samsung android=14.0-smr-may-2024-r1
Samsung android=14.0-smr-nov-2021-r1
Samsung android=14.0-smr-nov-2022-r1
Samsung android=14.0-smr-nov-2023-r1
Samsung android=14.0-smr-nov-2024-r1
Samsung android=14.0-smr-oct-2022-r1
Samsung android=14.0-smr-oct-2023-r1
Samsung android=14.0-smr-oct-2024-r1
Samsung android=14.0-smr-sep-2022-r1
Samsung android=14.0-smr-sep-2023-r1
Samsung android=14.0-smr-sep-2024-r1
Samsung Message<SMR Jan-2025 Release 1
Event History
Feb 4, 2025
CVE Published
via MITRE·07:19 AM
Data Sourced
via MITRE·07:19 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-20884?
CVE-2025-20884 has a high severity rating due to its implications for unauthorized data access across user profiles.
2
How do I fix CVE-2025-20884?
To fix CVE-2025-20884, update Samsung Message to the version included in the SMR Jan-2025 Release 1.
3
Who is affected by CVE-2025-20884?
Users of Samsung Message prior to SMR Jan-2025 Release 1 are affected by CVE-2025-20884, particularly those with multiple user profiles.
4
What kind of attacks does CVE-2025-20884 allow?
CVE-2025-20884 allows physical attackers to potentially gain access to sensitive data by exploiting improper access control.
5
Is CVE-2025-20884 exploitable remotely?
CVE-2025-20884 is not considered remotely exploitable as it requires physical access to the device.