4.6
/ 10
MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
Basic Information
ID
CVE-2025-21035
Source
SamsungMobile
Published
Sep 3, 2025 at 06:05
Affected Product
Vendor
Samsung Mobile
Product
Samsung Calendar
Version
12.5.06.5 in Android 14 and 12.6.01.12 in Android 15