Improper Permissions in Galaxy Watch Framework by Samsung
CVE-2025-20997

6.2MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
8 July 2025

What is CVE-2025-20997?

The Galaxy Watch framework by Samsung contains an improper permission assignment issue that could allow local attackers to modify or reset specific configurations. This vulnerability affects versions released before SMR Jul-2025 Release 1, potentially compromising user settings and device functionality.

Affected Version(s)

Samsung Mobile Devices SMR Jul-2025 Release in Android Watch 14

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20997 : Improper Permissions in Galaxy Watch Framework by Samsung