5.5
/ 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
Basic Information
ID
CVE-2025-21049
Source
SamsungMobile
Published
Oct 10, 2025 at 06:33
Affected Product
Vendor
Samsung Mobile
Product
Samsung Mobile Devices
Version
SMR Oct-2025 Release in Android 15, 16