CVE-2025-20971 Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung…

Description

Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Flow 4.9	earliest → < 4.9.17.6	4.9.17.6

Other CVEs of Samsung Flow

The 11 CVEs of Samsung Flow →

CVE-2026-21134 Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive… 6.1 Medium CVE-2026-21133 Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data 5.1 Medium CVE-2026-21131 Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary… 2.1 Low CVE-2025-20972 Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers… 6.2 Medium