deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3218
Published: 2025-05-07
Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver.  A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-295
References: https://www.ibm.com/support/pages/node/7232750
CVE: CVE-2025-2821
Published: 2025-05-07
Description: The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_rest_permission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding content from search results.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/search-exclude/tags/2.4.6/lib/api/entities/settings/class-post.php#L42; https://plugins.trac.wordpress.org/changeset/3284798/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1f72a309-8ef8-4943-8e64-38bb7909397a?source=cve
CVE: CVE-2025-3844
Published: 2025-05-07
Description: The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483; https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2836; https://www.wordfence.com/threat-intel/vulnerabilities/id/65be9417-7029-4f34-b834-98208a42743b?source=cve
CVE: CVE-2025-3851
Published: 2025-05-07
Description: The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 1.1.0 to 2.7.13 via the show() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's data like email address, name, and notes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/smartpay/tags/2.7.13/app/Http/Controllers/Rest/CustomerController.php#L34; https://www.wordfence.com/threat-intel/vulnerabilities/id/3aade1bd-b69d-4134-a4f7-78372a291557?source=cve
CVE: CVE-2025-3852
Published: 2025-05-07
Description: The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.0 to 2.6.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email & password through the update() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0//core/external/eo-framework/modules/wpeo-model/class/user.class.php#L132; https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0//modules/api/action/class-api-action.php#L32; https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0/core/external/eo-framework/modules/wpeo-model/class/rest.class.php#L41
CVE: CVE-2025-3853
Published: 2025-05-07
Description: The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 2.0.0 to 2.6.0 via the callback_generate_api_key() due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create valid API keys on behalf of other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0/modules/api/action/class-api-action.php#L160; https://www.wordfence.com/threat-intel/vulnerabilities/id/136d63c4-c985-413f-8d8b-b57e11d1d230?source=cve
CVE: CVE-2025-3860
Published: 2025-05-07
Description: The CarDealerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘saleclass' parameter in all versions up to, and including, 6.8.2505.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/cardealerpress/tags/6.7.2412.00/templates/shortcode/sc_inventory_counter.php#L34; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3292757%40cardealerpress&new=3292757%40cardealerpress&sfp_email=&sfph_mail=; https://wordpress.org/plugins/cardealerpress/#developers
CVE: CVE-2025-3921
Published: 2025-05-07
Description: The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handel_ajax_req() function in versions 1.9.1 to 7.5.2. This makes it possible for unauthenticated attackers to update arbitrary user's metadata which can be leveraged to block an administrator from accessing their site when wp_capabilities is set to 0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483; https://wordpress.org/plugins/peprodev-ups/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/a881ca02-cef9-4f4b-8a62-e241c4c80004?source=cve
CVE: CVE-2025-3924
Published: 2025-05-07
Description: The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483; https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2659; https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2810
CVE: CVE-2025-4054
Published: 2025-05-07
Description: The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and including, 4.24.3 (Free) and <= 2.27.4 (Premium), due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the search results.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.3/lib/excerpts-highlights.php#L508; https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.3/lib/excerpts-highlights.php#L683; https://plugins.trac.wordpress.org/changeset/3283795/
CVE: CVE-2025-4055
Published: 2025-05-07
Description: The Multiple Post Type Order plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mpto' shortcode in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/multiple-post-type-order/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/b148926d-090d-4fab-991c-89105078a263?source=cve
CVE: CVE-2025-4220
Published: 2025-05-07
Description: The Xavin&#039;s List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xls' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/xavins-list-subpages/trunk/xavins-list-subpages.php#L29; https://www.wordfence.com/threat-intel/vulnerabilities/id/df30f21a-cd3a-4391-9f59-81538fefabdc?source=cve
CVE: CVE-2025-4335
Published: 2025-05-07
Description: The Woocommerce Multiple Addresses plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.7.1. This is due to insufficient restrictions on user meta that can be updated through the save_multiple_shipping_addresses() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/woocommerce-multiple-addresses/trunk/class-woocommerce-multiple-addresses.php#L522; https://www.wordfence.com/threat-intel/vulnerabilities/id/95e74e70-9dc9-4e63-b371-fd2a38692907?source=cve
CVE: CVE-2025-3766
Published: 2025-05-07
Description: The Login Lockdown & Protection plugin for WordPress is vulnerable to unauthorized nonce access due to a missing capability check on the ajax_run_tool function in all versions up to, and including, 2.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain a valid nonce that can be used to generate a global unlock key, which can in turn be used to add arbitrary IP address to the plugin allowlist. This can only by exploited on new installations where the site administrator hasn't visited the loginlockdown page yet.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/login-lockdown/trunk/libs/ajax.php#L17; https://plugins.trac.wordpress.org/changeset/3286814/login-lockdown; https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9a3848-f486-475b-b2c7-ea1007bb30d3?source=cve
CVE: CVE-2025-1399
Published: 2025-05-07
Description: Out-of-bounds Read vulnerability in unpack_response (session.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.
CVSS Score: 3.1 (LOW)
CWE: CWE-125
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1399
CVE: CVE-2025-1400
Published: 2025-05-07
Description: Out-of-bounds Read vulnerability in unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.
CVSS Score: 3.1 (LOW)
CWE: CWE-125
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1400
CVE: CVE-2025-32396
Published: 2025-05-07
Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32396
CVE: CVE-2025-32397
Published: 2025-05-07
Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32397
CVE: CVE-2025-32398
Published: 2025-05-07
Description: A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32398
CVE: CVE-2025-32399
Published: 2025-05-07
Description: An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library to enter an infinite loop by sending a malicious RPC packet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-606, CWE-1284
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32399
CVE: CVE-2025-32400
Published: 2025-05-07
Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32400
CVE: CVE-2025-32401
Published: 2025-05-07
Description: An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32401
CVE: CVE-2025-32402
Published: 2025-05-07
Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32402
CVE: CVE-2025-32403
Published: 2025-05-07
Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32403
CVE: CVE-2025-32404
Published: 2025-05-07
Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32404
CVE: CVE-2025-32405
Published: 2025-05-07
Description: An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-32405
CVE: CVE-2024-12120
Published: 2025-05-07
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_text parameter in all versions up to, and including, 1.7.1017 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3236381/royal-elementor-addons/tags/1.7.1008/modules/countdown/widgets/wpr-countdown.php?old=3220755&old_path=royal-elementor-addons%2Ftags%2F1.7.1007%2Fmodules%2Fcountdown%2Fwidgets%2Fwpr-countdown.php; https://plugins.trac.wordpress.org/changeset/3285549/royal-elementor-addons/tags/1.7.1018/assets/js/frontend.js?old=3277554&old_path=royal-elementor-addons%2Ftags%2F1.7.1017%2Fassets%2Fjs%2Ffrontend.js; https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=cve
CVE: CVE-2025-0666
Published: 2025-05-07
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.compass-security.com/fileadmin/Research/Advisories/2025_01_CSNC-2025-002_BOINC_multiple_XSS.txt; https://www.compass-security.com/fileadmin/Research/Advisories/2025_01_CSNC-2025-002_BOINC_multiple_XSS.txt
CVE: CVE-2025-0667
Published: 2025-05-07
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.compass-security.com/fileadmin/Research/Advisories/2025_02_CSNC-2025-003_BOINC_stored_XSS.txt; https://www.compass-security.com/fileadmin/Research/Advisories/2025_02_CSNC-2025-003_BOINC_stored_XSS.txt
CVE: CVE-2025-0668
Published: 2025-05-07
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.compass-security.com/fileadmin/Research/Advisories/2025_03_CSNC-2025-004_BOINC_multiple_SQLi.txt; https://www.compass-security.com/fileadmin/Research/Advisories/2025_03_CSNC-2025-004_BOINC_multiple_SQLi.txt
CVE: CVE-2025-0669
Published: 2025-05-07
Description: Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.compass-security.com/fileadmin/Research/Advisories/2025_04_CSNC-2025-005_BOINC_CSRF.txt; https://www.compass-security.com/fileadmin/Research/Advisories/2025_04_CSNC-2025-005_BOINC_CSRF.txt
CVE: CVE-2025-4171
Published: 2025-05-07
Description: The WZ Followed Posts – Display what visitors are reading plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wfp' shortcode in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3287192%40where-did-they-go-from-here&new=3287192%40where-did-they-go-from-here&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/2b27a7b1-6fee-433f-8102-4a3745a8dfed?source=cve
CVE: CVE-2025-20937
Published: 2025-05-07
Description: Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20949
Published: 2025-05-07
Description: Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE: CVE-2025-20953
Published: 2025-05-07
Description: Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities within SmartManagerCN.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20954
Published: 2025-05-07
Description: Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20955
Published: 2025-05-07
Description: Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 allows local attackers to access notification images.
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20956
Published: 2025-05-07
Description: Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access developer settings.
CVSS Score: 4.3 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20957
Published: 2025-05-07
Description: Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.
CVSS Score: 7.3 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20958
Published: 2025-05-07
Description: Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoWiFi related behaviors.
CVSS Score: 4.4 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20959
Published: 2025-05-07
Description: Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20960
Published: 2025-05-07
Description: Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20961
Published: 2025-05-07
Description: Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege.
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20962
Published: 2025-05-07
Description: Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20963
Published: 2025-05-07
Description: Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20964
Published: 2025-05-07
Description: Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05
CVE: CVE-2025-20965
Published: 2025-05-07
Description: Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE: CVE-2025-20966
Published: 2025-05-07
Description: Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05