AI description
CVE-2025-58487 describes an improper authorization vulnerability found in Samsung Account versions prior to 15.5.01.1. This flaw enables a local attacker to initiate arbitrary activities using the elevated privileges of the Samsung Account application. The vulnerability stems from inadequate authorization checks within the Samsung Account application, which fails to properly validate permissions before allowing activity launches. This oversight permits unauthorized components to invoke Samsung Account activities with the application's elevated privileges.
- Description
- Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.
- Source
- mobile.security@samsung.com
- NVD status
- Analyzed
- Products
- account
CVSS 3.1
- Type
- Primary
- Base score
- 3.3
- Impact score
- 1.4
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Severity
- LOW
- Hype score
- Not currently trending
[ZDI-26-225|CVE-2025-58487] (Pwn2Own) Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability (CVSS 5.6; Credit: Ken Gannon / 伊藤 剣 (@yogehi) of Mobile Hacking Lab, and Dimitrios Valsamaras (@Ch0pin)) https://t.co/STxvHFWXur
@TheZDIBugs
27 Mar 2026
562 Impressions
0 Retweets
2 Likes
2 Bookmarks
0 Replies
0 Quotes
CVE-2025-58487 Samsung Account Local Privilege Escalation Prior to Version 15.5.... https://t.co/oq1n7uZC0u Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x
@VulmonFeeds
2 Dec 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-58487 Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege. https://t.co/5LL1CawFTY
@CVEnew
2 Dec 2025
149 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:samsung:account:*:*:*:*:*:*:*:*",
"matchCriteriaId": "ADCF1AE1-0682-4C36-AB63-0A6B114BA75E",
"versionEndExcluding": "15.5.01.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]