Medium CVSS: 6.2 CVE-2025-20972 Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Medium CVSS: 5.5 CVE-2025-20971 Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow.