VULNERABILITY INTELLIGENCE

CVE-2025-20956

CVSS score4.3 MEDIUM

EPSS probability0.19%

CISA KEVNot currently listed

Published2025-05-07

Last modified2026-06-17

Description

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access developer settings.