Improper Input Validation in Samsung Internet Browser
CVE-2025-58485

5.5MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Internet
Vendor
CVE Published:
2 December 2025

What is CVE-2025-58485?

An improper input validation flaw in the Samsung Internet browser prior to version 29.0.0.48 enables local attackers to perform arbitrary script injection, potentially compromising user data and system integrity. Users are advised to update to the latest version to mitigate this vulnerability.

Affected Version(s)

Samsung Internet 29.0.0.48

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-58485 : Improper Input Validation in Samsung Internet Browser