Samsung Smart Touch Call vulnerabilities

3 CVEs affecting Samsung Smart Touch Call, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-58488, published 2025-12-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-25448, published 2021-08-05. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview.
CVE-2025-58488, published 2025-12-02. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for…
CVE-2024-49417, published 2024-12-03. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this…