CVE-2025-21063: voice recorder before 21.5.73.12 (exclusive), before 21.5.81.40 (exclusive); +1 more affected products

Affected technology

voice recorder · before 21.5.73.12 (exclusive)
samsung

voice recorder · before 21.5.81.40 (exclusive)
samsung

Samsung Voice Recorder · Exact affected versions not specified by the source
Samsung Mobile

Description’s affected range: prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Physical access · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Physical access · No privileges required · No user interaction required

What an attacker can do

Physical attackers can access recording files on the lock screen. Vendor/CNA’s CVSS 3.1 assessment (base score 4.6/10) rates confidentiality impact as high; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 4.6/10) rates confidentiality impact as high; integrity and availability impact as none.