Improper Access Control in Samsung Calendar by Samsung
CVE-2025-21035

4.6MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Calendar
Vendor
CVE Published:
3 September 2025

What is CVE-2025-21035?

An improper access control vulnerability in Samsung Calendar allows physical attackers to exploit the system and access sensitive data across multiple user profiles. This issue affects specific versions of the app on Android 14 and Android 15, making it essential for users to update to the latest software releases to safeguard their information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Samsung Calendar 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.