CVE-2025-20998

published 2025-07-08

CVE-2025-20998: Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.

low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
samsung	wear_os	—	—