CVE-2025-20945

Summary

CVE-2025-20945 is a vulnerability affecting the Galaxy Watch. This issue involves improper access control, allowing local attackers to gain unauthorized access to sensitive information on affected devices. Before the SMR Apr-2025 Release 1, the Galaxy Watch failed to implement adequate access controls, posing a significant risk to user privacy. Attackers can exploit this vulnerability to obtain personal data, potentially compromising the security and integrity of the affected devices. Users are advised to update their Galaxy Watch to the latest software release to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.