← Database

CVE-2025-20952

MEDIUM CVSS: 5.5 Published: 2025-04-09 Modified: 2026-06-17

Description

Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege.

Affected Platforms

Samsung Android

Weakness Type

NVD-CWE-noinfo

References