Samsung Sassistant vulnerabilities

4 CVEs affecting Samsung Sassistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21040, published 2025-09-03.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-30735, published 2023-10-04. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant.
• CVE-2025-21040, published 2025-09-03. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
• CVE-2025-21039, published 2025-09-03. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
• CVE-2025-21038, published 2025-09-03. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.