{"id":"CVE-2025-20970","aliases":["EUVD-2025-13689","GHSA-jg34-99pf-2cmp"],"status":"published","title":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14...","description":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00147,"percentile":0.03974,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-05-07T08:24:25Z","modified":"2026-06-17T08:42:19Z","products":[{"vendor":"samsung mobile","product":"bixby vision"}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2025\u0026month=05"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-20970"},{"url":"https://github.com/advisories/GHSA-jg34-99pf-2cmp"}],"sources":{"cve":[{"id":"CVE-2025-20970","description":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.","status":"published","published":"2025-05-07T08:24:25.907Z","modified":"2025-05-07T15:48:44.098Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:32:25.982948Z"}],"euvd":[{"id":"EUVD-2025-13689","description":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.","status":"published","published":"2025-05-07T08:24:25Z","modified":"2025-05-07T15:48:44Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:53.098709Z"}],"ghsa":[{"id":"GHSA-jg34-99pf-2cmp","title":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14...","description":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.","status":"published","published":"2025-05-07T09:31:19Z","modified":"2025-05-07T09:31:26Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:02:10.218491Z"}],"nvd":[{"id":"CVE-2025-20970","description":"Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.","status":"published","published":"2025-05-07T09:15:17.42Z","modified":"2026-06-17T08:42:19.28Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:11:06.085152Z"}]}}