NetSight
medium4.1

CVE-2025-20886

Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.

Impact

Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.

Affected products

VendorProductAffected versions
SamsungAndroid
Versions 12.0, 13.0, 14.0

Weakness classification

References