Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.
References
| Link | Resource |
|---|---|
| https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
09 Jan 2026, 18:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Samsung galaxy Watch 4
Samsung galaxy Watch Samsung Samsung galaxy Watch 5 Samsung galaxy Watch 5 Pro Samsung wear Os Samsung galaxy Watch Ultra Samsung galaxy Watch 7 Samsung galaxy Watch 6 Samsung galaxy Watch 4 Classic Samsung galaxy Watch 6 Classic Samsung galaxy Watch Fe |
|
| CPE | cpe:2.3:h:samsung:galaxy_watch_4_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_fe:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_7:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:wear_os:5.0:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_ultra:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5_pro:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_4:-:*:*:*:*:*:*:* |
|
| CWE | CWE-922 | |
| References | () https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10 - Vendor Advisory |
10 Oct 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-10 07:15
Updated : 2026-01-09 18:11
NVD link : CVE-2025-21045
Mitre link : CVE-2025-21045
CVE.ORG link : CVE-2025-21045
JSON object : View
Products Affected
samsung
- galaxy_watch_fe
- galaxy_watch_6
- galaxy_watch_ultra
- galaxy_watch_4
- galaxy_watch_5
- wear_os
- galaxy_watch_5_pro
- galaxy_watch_7
- galaxy_watch
- galaxy_watch_6_classic
- galaxy_watch_4_classic
CWE
CWE-922
Insecure Storage of Sensitive Information