Improper Privilege Management in Bluetooth Affects Samsung Devices
CVE-2025-21000

6.2MEDIUM

Key Information:

Vendor

Samsung

Vendor
CVE Published:
8 July 2025

What is CVE-2025-21000?

The vulnerability involves improper privilege management in Bluetooth functionality on Samsung devices, which allows local attackers to exploit the system. By taking advantage of this flaw, attackers can enable Bluetooth without appropriate permissions, potentially leading to unauthorized access to sensitive data or functions. It is crucial for users to update their devices to the latest security release to mitigate the risks associated with this vulnerability.

Affected Version(s)

Samsung Mobile Devices SMR Jul-2025 Release in Android 13, 14, 15

References

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21000 : Improper Privilege Management in Bluetooth Affects Samsung Devices