CVE-2025-20910
📋 TL;DR
This vulnerability allows local attackers to access Galaxy Watch Gallery data due to incorrect default permissions. It affects Samsung Galaxy Watch devices running vulnerable versions of the Galaxy Watch Gallery application. Attackers must have local access to the device to exploit this.
💻 Affected Systems
- Samsung Galaxy Watch devices
📦 What is this software?
Wear Os by Samsung
⚠️ Risk & Real-World Impact
Worst Case
Local attackers could access sensitive user data stored in Galaxy Watch Gallery, potentially including personal photos, watch faces, or configuration data.
Likely Case
Malicious apps or users with physical access could read gallery data they shouldn't have permission to access.
If Mitigated
With proper access controls and updated software, the vulnerability is eliminated and data remains protected.
🎯 Exploit Status
Exploitation requires local access to the device, either through physical access or a malicious application.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: SMR Mar-2025 Release 1 or later
Vendor Advisory: https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=03
Restart Required: Yes
Instructions:
1. Open Galaxy Wearable app on paired phone. 2. Go to Watch settings > About watch > Software update. 3. Check for and install available updates. 4. Restart watch after update completes.
🔧 Temporary Workarounds
Disable Galaxy Watch Gallery
allTemporarily disable the vulnerable application until patched
Restrict physical access
allEnsure watch is physically secured and not accessible to untrusted individuals
🧯 If You Can't Patch
- Limit physical access to the device
- Avoid installing untrusted applications on the watch
🔍 How to Verify
Check if Vulnerable:
Check Galaxy Watch Gallery version in Watch settings > Apps > Galaxy Watch Gallery > App infoCheck Version:
Not applicable - check through watch settings interfaceVerify Fix Applied:
Verify software version is SMR Mar-2025 Release 1 or later in Watch settings > About watch > Software info📡 Detection & Monitoring
Log Indicators:
- Unauthorized access attempts to Galaxy Watch Gallery data
- Permission violation logs
Network Indicators:
- Not applicable - local vulnerability
SIEM Query:
Not applicable for typical SIEM monitoring of wearable devices