Sensitive Information Disclosure in EasySetup by Samsung

CVE-2025-20896

What is CVE-2025-20896?

The vulnerability in EasySetup prior to version 11.1.18 arises from the use of implicit intents, which can be exploited by local attackers to gain unauthorized access to sensitive information. This can lead to potentially serious privacy and security risks, as attackers may retrieve data that should remain protected. It is essential for users of affected versions to apply the relevant updates to safeguard their sensitive information.

References