Improper Access Control in MPRemoteService of MotionPhoto by Samsung
CVE-2025-58481

7.3HIGH

Key Information:

Vendor

Samsung
Status
Motionphoto
Vendor
CVE Published:
2 December 2025

What is CVE-2025-58481?

The MPRemoteService component of MotionPhoto prior to version 4.1.51 is affected by a vulnerability that allows local attackers to gain unauthorized access to privileged services. This weakness can be exploited by malicious users to manipulate system functionalities, creating potential risks for user data and device integrity. It's crucial for users to update their MotionPhoto applications to the latest version to mitigate these risks.

Affected Version(s)

MotionPhoto 4.1.51

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.