CVE-2021-25424: Samsung Galaxy Watch 3 Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.

Affected products

• Samsung Galaxy Watch 3 Firmware: before 5.5 (fixed in 5.5)
• Samsung Galaxy Watch Active 2 Firmware: before 5.5 (fixed in 5.5)
• Samsung Galaxy Watch Active Firmware: before 5.5 (fixed in 5.5)
• Samsung Galaxy Watch Firmware: before 5.5 (fixed in 5.5)
• Samsung Gear 2 Firmware: before 5.5 (fixed in 5.5)
• Samsung Gear 2 Neo Firmware: before 5.5 (fixed in 5.5)
• Samsung Gear s2 Firmware: before 5.5 (fixed in 5.5)
• Samsung Gear s3 Firmware: before 5.5 (fixed in 5.5)
• Samsung Gear S Firmware: before 5.5 (fixed in 5.5)

Published 2021-06-11. Last modified 2026-06-17.