BaseFortify

Publication date: 2025-12-02

Last updated on: 2025-12-04

Assigner: Samsung Mobile

Description

Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-02

Last Modified

2025-12-04

Generated

2026-07-06

AI Q&A

2025-12-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58482

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	motionphoto	to 4.1.51 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability is an improper access control issue in the MPLocalService component of the MotionPhoto application before version 4.1.51. It allows local attackers to start a privileged service, which they should not normally be able to do.

Impact Analysis

An attacker with local access could exploit this vulnerability to start a privileged service, potentially leading to high impact on confidentiality, integrity, and availability of the system or data.

Hi! I’m here to help you understand CVE-2025-58482. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70