CVE-2025-21035

published 2025-09-03

CVE-2025-21035: Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data…

medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C H I N A N

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
msrc	cbl2_qt5-qtbase_5.12.11-15_on_cbl_mariner_2.0	—	—
msrc	cbl2_qt5-qtsvg_5.12.11-3_on_cbl_mariner_2.0	—	—
msrc	cm1_qt5-qtsvg_5.12.11-2_on_cbl_mariner_1.0	—	—
samsung	calendar	< 12.5.06.5	12.5.06.5
samsung	calendar	< 12.6.01.12	12.6.01.12

CWE-770