CVE-2025-20884

Summary

CVE-2025-20884 is a vulnerability affecting Samsung Message before the SMR Jan-2025 Release 1. This issue involves improper access control, allowing physical attackers to bypass security restrictions and gain unauthorized access to data across multiple user profiles. This vulnerability poses a significant threat to privacy and confidentiality. Successful exploitation could result in the exposure of sensitive information belonging to different users. Samsung has released a patch to address this issue, and users are strongly encouraged to install it to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.