CVE-2025-20946

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Apr 8, 2025

Summary

CVE-2025-20946 is a vulnerability affecting the Bluetooth pairing process on Samsung Galaxy Watch. The issue arises from improper exception handling during the pairing of specific Bluetooth devices before the SMR Apr-2025 Release 1. This flaw enables local attackers to pair with these specific devices without requiring user interaction, raising security concerns for the affected wearable devices.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share