6.2
Medium
CVE-2025-20972 Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers…
Description
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Flow 4.9 | earliest → < 4.9.17.6 | 4.9.17.6 |
Other CVEs of Samsung Flow
The 11 CVEs of Samsung Flow →
CVE-2026-21134
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive…
6.1
Medium
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data
5.1
Medium
CVE-2026-21131
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary…
2.1
Low
CVE-2025-20971
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung…
5.5
Medium