5.5 Medium

CVE-2025-20975 Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to…

Description

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege.

Affected products and versions

Product	Affected versions	Fixed in
AODService 8.8	earliest → < 8.8.28.12	8.8.28.12

Do you use AODService?

Track this CVE Watch AODService Check my SBOMs

www.cveye.io/en/cve/CVE-2025-20975

Timeline

Published May 7, 2025
Last modified May 7, 2025

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE