CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20895

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 5.5%

CVSS Severity

CVSS v3 Score 3.2

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01

Products affected by CVE-2025-20895

Samsung » Galaxy Store » Version: N/A

cpe:2.3:a:samsung:galaxy_store:-
Samsung » Galaxy Store » Version: 4.5.32.4

cpe:2.3:a:samsung:galaxy_store:4.5.32.4
Samsung » Galaxy Store » Version: 4.5.36.4

cpe:2.3:a:samsung:galaxy_store:4.5.36.4
Samsung » Galaxy Store » Version: 4.5.41.8

cpe:2.3:a:samsung:galaxy_store:4.5.41.8
Samsung » Galaxy Store » Version: 4.5.63.6

cpe:2.3:a:samsung:galaxy_store:4.5.63.6
Samsung » Galaxy Store » Version: 4.5.64.4

cpe:2.3:a:samsung:galaxy_store:4.5.64.4
Samsung » Galaxy Store » Version: 4.5.81.0

cpe:2.3:a:samsung:galaxy_store:4.5.81.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20895

Products

Pricing

Contact Us