CVE-2025-20899 | THREATINT

Description

Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1.00.5 in Android 14 allows local attackers to access sensitive information.

Reserved 2024-11-06 | Published 2025-02-04 | Updated 2025-02-04 | Assigner SamsungMobile

MEDIUM: 4.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-284: Improper Access Control

Product status

Default status

affected

13.0.00.15 in Android 12, 14.0.00.7 in Android 13, 15.1.00.5 in Android 14

unaffected

References

security.samsungmobile.com/...iceWeb.smsb?year=2025&month=01

cve.org (CVE-2025-20899)

nvd.nist.gov (CVE-2025-20899)

Download JSON