CVE-2025-20978: Samsung Mobile Penup

Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.

Affected products

• Samsung Mobile Penup

Published 2025-05-07. Last modified 2026-06-17.