Vulnerability in Samsung Mobile Secure Folder
CVE-2025-20897
Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows local attacker to access data in Secure Folder.
EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Samsung Mobile Secure Folder — versions 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12
References
Frequently asked questions
- What is CVE-2025-20897?
- CVE-2025-20897 is a medium-severity vulnerability in Samsung Mobile Secure Folder, classified under CWE-926 : IMPROPER EXPORT OF ANDROID APPLICATION COMPONENTS. CVSS score: 6.8/10. Published 2025-02-04.
- How severe is CVE-2025-20897?
- Medium severity. CVSS v3 base score is 6.8 out of 10.