← Database

CVE-2025-20994

MEDIUM CVSS: 4.5 Published: 2025-06-04 Modified: 2026-06-17

Description

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files.

Affected Platforms

Samsung Internet

Weakness Type

NVD-CWE-Other

References