CVE-2025-21063
📋 TL;DR
This vulnerability allows physical attackers to access voice recording files while the device is locked. It affects Samsung Voice Recorder on Android 15 and 16 devices. The attacker must have physical access to the locked device to exploit this flaw.
💻 Affected Systems
- Samsung Voice Recorder
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Physical attackers could access sensitive voice recordings containing personal conversations, confidential information, or authentication details while the device is locked.
Likely Case
Someone with brief physical access to a locked device could browse and potentially extract voice recordings without authentication.
If Mitigated
With proper access controls, recordings remain protected behind authentication even when the device is locked.
🎯 Exploit Status
Exploitation requires physical access to the locked device. No authentication bypass needed once physical access is obtained.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 21.5.73.12 for Android 15, 21.5.81.40 for Android 16
Vendor Advisory: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
Restart Required: No
Instructions:
1. Open Samsung Galaxy Store or Google Play Store. 2. Search for Samsung Voice Recorder. 3. Update to latest version (21.5.73.12+ for Android 15, 21.5.81.40+ for Android 16). 4. Alternatively, enable automatic updates in device settings.
🔧 Temporary Workarounds
Disable Voice Recorder Lock Screen Access
androidPrevent Voice Recorder from being accessible from lock screen
Use Secure Lock Screen
androidEnable strong authentication (PIN, password, biometrics) and ensure device locks quickly
🧯 If You Can't Patch
- Disable Voice Recapper app or restrict its permissions
- Enable encryption for sensitive recordings and store them in secure locations
🔍 How to Verify
Check if Vulnerable:
Check Voice Recapper version in Settings > Apps > Voice Recapper > App info. If version is below 21.5.73.12 on Android 15 or below 21.5.81.40 on Android 16, device is vulnerable.Check Version:
adb shell dumpsys package com.sec.android.app.voicenote | grep versionNameVerify Fix Applied:
Verify Voice Recapper version is 21.5.73.12 or higher on Android 15, or 21.5.81.40 or higher on Android 16. Test by locking device and attempting to access recordings.📡 Detection & Monitoring
Log Indicators:
- Unusual access patterns to voice recording files
- Failed authentication attempts followed by recording access
Network Indicators:
- Not applicable - local access only
SIEM Query:
Not applicable for this physical access vulnerability