CVE-2021-25406: Samsung Gear S

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information.

Affected products

• Samsung Gear S: before 2.2.05.20122441 (fixed in 2.2.05.20122441)

Published 2021-06-11. Last modified 2026-06-17.