Improper Access Control in Samsung Calendar by Samsung
CVE-2025-21035

4.6MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Calendar
Vendor
CVE Published:
3 September 2025

What is CVE-2025-21035?

An improper access control vulnerability in Samsung Calendar allows physical attackers to exploit the system and access sensitive data across multiple user profiles. This issue affects specific versions of the app on Android 14 and Android 15, making it essential for users to update to the latest software releases to safeguard their information.

Affected Version(s)

Samsung Calendar 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21035 : Improper Access Control in Samsung Calendar by Samsung