Cyber Resilience

CVE-2025-20966

Samsung Gallery ≤ 14.5.10.3

Published
07 May 2025
Modified
17 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 4.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0021 10th percentile
Risk Priority 35 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2025-20966 is a medium-severity an unspecified weakness vulnerability in Samsung Gallery. Its CVSS base score is 4.6 (Medium).

Operationally, ranked at the 10th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-20969Same product: Samsung Android
CVE-2025-20968Same product: Samsung Android
CVE-2025-20967Same product: Samsung Android
CVE-2025-20903Same product: Samsung Android
CVE-2024-49422Same product: Samsung Android
CVE-2024-34603Same product: Samsung Android
CVE-2024-20813Same product: Samsung Android
CVE-2023-42538Same product: Samsung Android
CVE-2024-34678Same product: Samsung Android
CVE-2023-30657Same product: Samsung Android

Affected Assets

samsung
gallery
≤ 14.5.10.3 · ≤ 14.5.09.3 · ≤ 15.5.04.5

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References