Sensitive Information Exposure in SoftSIM TA for Samsung Devices

CVE-2025-20886

Summary

The SoftSIM Trusted Application (TA) released by Samsung prior to the January 2025 Security Maintenance Release (SMR) contains a vulnerability that allows local privileged attackers to access sensitive test keys. This situation arises from the inclusion of confidential information in test code, which could potentially compromise the integrity and security of affected devices. Users are advised to update their systems promptly to mitigate this risk.

References