CVE-2025-21047
BaseFortify
Publication date: 2025-10-10
Last updated on: 2025-10-23
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in KnoxGuard before the SMR Oct-2025 Release 1. It allows physical attackers to access and use privileged APIs that should be restricted, potentially bypassing security controls.
How can this vulnerability impact me? :
An attacker with physical access to the device could exploit this vulnerability to use privileged APIs without authorization. This could lead to unauthorized access to sensitive data (confidentiality impact) and limited disruption of service (availability impact), potentially compromising device security.