CVE-2025-20906

Summary

CVE-2025-20906 is a vulnerability affecting Android devices before the SMR Feb-2025 Release 1. This issue stems from an improper export of application components in the Settings system. Local attackers can exploit this flaw to enable ADB (Android Debug Bridge), posing a significant security risk.By granting unauthorized access to ADB, an attacker can install malicious applications, steal sensitive data, or execute arbitrary code. The vulnerability is rectified in the SMR Feb-2025 Release 1, and users are advised to update their devices to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.