6.1 Medium

CVE-2025-20974 Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to…

Description

Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to bypass user interaction for requested installation.

Affected products and versions

Product	Affected versions	Fixed in
PackageInstallerCN 15.0	earliest → < 15.0.11.0	15.0.11.0

Do you use PackageInstallerCN?

Track this CVE Watch PackageInstallerCN Check my SBOMs

www.cveye.io/en/cve/CVE-2025-20974

Timeline

Published May 7, 2025
Last modified May 7, 2025

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE