Unrated severityNVD Advisory· Published Dec 2, 2025· Updated Dec 2, 2025

CVE-2025-58488

Description

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Smart Touch Call/SmartTouchCallllm-create
Range: <1.0.1.1
Samsung Mobile/SmartTouchCallv5
Range: 1.0.1.1

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbmitre

News mentions

ZDI-26-223: (Pwn2Own) Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability
Zero Day Initiative · Mar 23, 2026

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000