CVE-2025-21063: Medium severity Samsung Voice Recorder vulnerability
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Voice Recorderto a version that resolves this vulnerability.Fixed in 21.5.73.12 - Upgrade
Upgrade
Samsung Voice Recorderto a version that resolves this vulnerability.Fixed in 21.5.81.40
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21063?
CVE-2025-21063 has been classified as a high severity vulnerability due to improper access control allowing unauthorized access to sensitive recordings.
How do I fix CVE-2025-21063?
To remediate CVE-2025-21063, update Samsung Voice Recorder to version 21.5.73.12 or later for Android 15 and version 21.5.81.40 or later for Android 16.
What are the risks associated with CVE-2025-21063?
The risks of CVE-2025-21063 include unauthorized access to private voice recordings by physical attackers who gain access to the device.
Who is affected by CVE-2025-21063?
Users of Samsung Voice Recorder versions prior to 21.5.73.12 on Android 15 and 21.5.81.40 on Android 16 are affected by CVE-2025-21063.
What devices are impacted by CVE-2025-21063?
CVE-2025-21063 impacts Samsung devices running affected versions of the Samsung Voice Recorder app.