VULNERABILITY INTELLIGENCE

CVE-2025-20951

CVSS score5.1 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2025-04-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Description

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references