Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-20974

Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to bypass user interaction for requested installation.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SamsungMobile

Description

Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to bypass user interaction for requested installation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile PackageInstallerCN

Default version status: affected

  • 15.0.11.0unaffected

References