← Database

CVE-2025-20995

MEDIUM CVSS: 4.9 Published: 2025-06-04 Modified: 2026-06-17

Description

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files.

Affected Platforms

Samsung Internet

Weakness Type

NVD-CWE-Other

References