CVE-2025-20951: Medium severity samsung galaxy store vulnerability
Published Apr 8, 2025
·Updated
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.
Affected Software
2 affected components
Samsung Galaxy Store<4.5.90.7
Samsung Galaxy Store<4.5.90.7
Event History
Apr 8, 2025
CVE Published
via MITRE·04:40 AM
Data Sourced
via MITRE·04:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20951?
CVE-2025-20951 is considered a high severity vulnerability due to its potential for local attackers to exploit the Galaxy Store.
2
How do I fix CVE-2025-20951?
To fix CVE-2025-20951, update the Galaxy Store to version 4.5.90.7 or later.
3
What systems are affected by CVE-2025-20951?
CVE-2025-20951 affects the Samsung Galaxy Store prior to version 4.5.90.7.
4
What type of attackers can exploit CVE-2025-20951?
CVE-2025-20951 can be exploited by local attackers who have access to the device.
5
What impact does CVE-2025-20951 have?
CVE-2025-20951 allows local attackers to write arbitrary files with the privileges of the Galaxy Store, potentially compromising the device.