CVE-2025-20972 Information

Description

Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.

Reference

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05