CVE-2025-20969 Information disclosure in Samsung Gallery
Local attackers can access data within the Samsung Gallery application due to improper input validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-20969?
CVE-2025-20969 is a medium-severity vulnerability in Samsung Gallery, published on 7 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery.
Which versions are affected by CVE-2025-20969?
It affects 1 product.
Products include Samsung Gallery.
How do I fix CVE-2025-20969?
No fix has been published for CVE-2025-20969 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-20969 being exploited?
There is no known exploitation of CVE-2025-20969 in the wild and no public exploit code.
Other vulnerabilities in Samsung Gallery
Sources
Also known as GHSA-g2w4-f56h-2wj6.