Android Sticker Center LPE via Improper Access Control (CVE-2025-20934)
CVE-2025-20934 Published on April 8, 2025
Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege.
Vulnerability Analysis
CVE-2025-20934 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
Products Associated with CVE-2025-20934
Want to know whenever a new CVE is published for Samsung Android? stack.watch will email you.
Affected Versions
Samsung Mobile Devices Version SMR Apr-2025 Release in Android 14 is unaffected by CVE-2025-20934Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.