6.8
/ 10
MEDIUM
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
Basic Information
ID
CVE-2025-21073
Source
SamsungMobile
Published
Nov 5, 2025 at 05:40
Affected Product
Vendor
Samsung Mobile
Product
Samsung Mobile Devices
Version
SMR Nov-2025 Release in Android 13, 14, 15, 16