CVE-2025-20970: Samsung Mobile Bixby Vision

Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.

Affected products

• Samsung Mobile Bixby Vision

Published 2025-05-07. Last modified 2026-06-17.