Base Score

MEDIUM6.8

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.

VectorLOCAL

Published Bymobile.security@samsung.com

Published DateSep 03, 2025, 06:15

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

6.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

LOW

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09

Base Score

MEDIUM6.8

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

6.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

LOW