CVE-2025-21041

MEDIUM

Android <16 - Info Disclosure

Title source: llm

Description

Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.

References (1)

Scores

CVSS v3 6.2
EPSS 0.0001
EPSS Percentile 2.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-922
Status published

Affected Products (1)

samsung/android < 16.0

Timeline

Published Sep 03, 2025
Tracked Since Feb 18, 2026