CVE-2025-20897

{"id": "CVE-2025-20897", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-20897", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-04T16:03:18.359439Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "mobile.security@samsung.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.5}]}, "affected": [{"source": "mobile.security@samsung.com", "affectedData": [{"vendor": "Samsung Mobile", "product": "Secure Folder", "versions": [{"status": "unaffected", "version": "1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12"}], "defaultStatus": "affected"}]}], "published": "2025-02-04T08:15:31.123", "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01", "source": "mobile.security@samsung.com"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows local attacker to access data in Secure Folder."}, {"lang": "es", "value": "El control de acceso inadecuado en Secure Folder anterior a la versi\u00f3n 1.9.20.50 en Android 14, 1.8.11.0 en Android 13 y 1.7.04.0 en Android 12 permite que un atacante local acceda a los datos en Secure Folder."}], "lastModified": "2026-06-17T08:42:09.933", "sourceIdentifier": "mobile.security@samsung.com"}