CVE-2025-20902

Summary

Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in MediaController's privilege.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileMedia Controller1.0.24.5282unaffected

Weaknesses

  • CWE-926 : Improper Export of Android Application Components

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References