CVE-2025-21059: Medium severity Samsung Health vulnerability
Published Oct 10, 2025
·Updated
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
Affected Software
2 affected components
Samsung Health<6.30.5.105
Samsung Health<6.30.5.105
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Healthto a version that resolves this vulnerability.Fixed in 6.30.5.105
Event History
Oct 10, 2025
CVE Published
via MITRE·06:33 AM
Data Sourced
via MITRE·06:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21059?
CVE-2025-21059 is classified as a medium severity vulnerability due to improper authorization in Samsung Health.
2
How do I fix CVE-2025-21059?
To fix CVE-2025-21059, upgrade Samsung Health to version 6.30.5.105 or later.
3
Who is affected by CVE-2025-21059?
CVE-2025-21059 affects users of Samsung Health versions prior to 6.30.5.105.
4
What type of attack does CVE-2025-21059 enable?
CVE-2025-21059 allows local attackers to access sensitive data in Samsung Health.
5
Is there a workaround for CVE-2025-21059?
No official workaround is provided for CVE-2025-21059; upgrading the app is the recommended action.