CVE-2025-58488

Medium CVSS: 4.5

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability.

Vendor

Samsung

Product

Smart Touch Call

CWE

NVD-CWE-Other

Yayın Tarihi

2025-12-02 02:15:48

Güncelleme

2026-01-08 16:33:21

Source Identifier

mobile.security@samsung.com

KEV Date Added

Kategoriler

NVD-CWE-Other Smart Touch Call MEDIUM Samsung 2025

Referanslar

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12

Benzer Kayıtlar

High

CVE-2026-21000

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…

Medium

CVE-2026-21001

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privileg…

Medium

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to inst…

Medium

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of serv…

High

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Sm…

Medium

CVE-2026-20992

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the back…