Improper Input Validation in Samsung Mobile's libsec-ril.so Component
CVE-2025-58475

5.6MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
2 December 2025

What is CVE-2025-58475?

Improper input validation in the libsec-ril.so component of Samsung Mobile's software allows local privileged attackers to manipulate memory beyond intended boundaries. This vulnerability poses risks of unauthorized access and potential exploitation, highlighting the importance of applying security updates promptly.

Affected Version(s)

Samsung Mobile Devices SMR Dec-2025 Release in Android 13, 14, 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-58475 : Improper Input Validation in Samsung Mobile's libsec-ril.so Component