BaseFortify

Publication date: 2025-12-02

Last updated on: 2025-12-03

Assigner: Samsung Mobile

Description

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-02

Last Modified

2025-12-03

Generated

2026-07-06

AI Q&A

2025-12-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58485

EUVD

EUVD-2025-200133

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	internet	to 29.0.0.48 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability is an improper input validation issue in Samsung Internet versions prior to 29.0.0.48. It allows local attackers to inject arbitrary scripts, which means an attacker with local access can execute malicious code within the browser environment.

Impact Analysis

The vulnerability can impact you by allowing a local attacker to inject and execute arbitrary scripts in your browser, potentially leading to unauthorized actions or data exposure within the browser context. However, it does not affect confidentiality or availability, only integrity is impacted.

Hi! I’m here to help you understand CVE-2025-58485. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70