medium6.2
CVE-2025-20972
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Impact
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Flow | before 4.9.17.6 |