Medium severity4.9NVD Advisory· Published Jun 4, 2025· Updated Jun 17, 2026

CVE-2025-20995

Description

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samsung Mobile/Samsung Internetllm-fuzzy
Range: <28.0.0.59
Samsung Mobile/Internetcpe-rescue
Range: 28.0.0.59

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000