Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.2

CVE-2025-20970: Bixby Vision on Android allows unauthorized access to image files

CVE-2025-20970 · published 1 year ago
Summary

Bixby Vision has a security flaw that allows a local attacker to access image files without permission. This could potentially lead to unauthorized access to sensitive information. To fix this, update Bixby Vision to the latest version available for your Android version.

Original advisory text
Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.
Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.2 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published7 May 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
Track software like this
Free during beta