VULNERABILITY INTELLIGENCE
CVE-2025-20973
CVSS score5.4 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Description
Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder.