Vulnerability in Samsung Mobile Bixby Vision
CVE-2025-20970
Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.
EPSS: 0.001 (3.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Samsung Mobile Bixby Vision — versions 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15
References
Frequently asked questions
- What is CVE-2025-20970?
- CVE-2025-20970 is a medium-severity vulnerability in Samsung Mobile Bixby Vision, classified under CWE-284 IMPROPER ACCESS CONTROL. CVSS score: 6.2/10. Published 2025-05-07.
- How severe is CVE-2025-20970?
- Medium severity. CVSS v3 base score is 6.2 out of 10.