Samsung Android 14/15 Security Bulletin: CVE-2025-21450 (KnoxVault OOB Write) & Galaxy Watch Fixes

Critical Vulnerability Information 1. CVE-2025-21450 (Critical) Affected: Android 14, 15 Description: Out-of-bounds write in KnoxVault trustlet Fix: Patch adds proper tpu validation. 2. SVE-2025-2335 (CVE-2025-21004) (Moderate) Affected: Galaxy Watch Description: Improper verification of intent by broadcast receiver in SystemUI for Galaxy Watch Fix: The patch adds proper authorization logic. 3. SVE-2025-0047C (CVE-2025-20977) (Moderate) Affected: Galaxy Watch Description: Incorrect default permission in Framework for Galaxy Watch Fix: The patch removes unused code. 4. SVE-2025-0123C (CVE-2025-20998) (Moderate) Affected: SamsungAccount for Galaxy Watch Description: Improper access control in SamsungAccount for Galaxy Watch Fix: The patch adds proper access control. 5. SVE-2025-0348C (CVE-2025-20999) (Moderate) Affected: Galaxy Tablet Description: Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet Fix: The patch adds proper authorization validation logic. 6. SVE-2025-0664C (CVE-2025-21000) (Moderate) Affected: Bluetooth Description: Improper privilege management in Bluetooth Fix: The patch adds proper authorization logic. 7. SVE-2025-0675C (CVE-2025-21001) (Moderate) Affected: LeAudioService Description: Improper access control in LeAudioService Fix: The patch adds proper access control. 8. SVE-2025-0710C (CVE-2025-21003) (Moderate) Affected: Emergency SOS Description: Insecure storage of sensitive information in Emergency SOS Fix: The patch was modified to securely save sensitive information. ``` These vulnerabilities cover issues ranging from critical to moderate severity, affecting multiple components and functionalities such as KnoxVault, Galaxy Watch, SamsungAccount, Wi-Fi password management, Bluetooth, LeAudioService, and Emergency SOS. Each vulnerability includes detailed mitigation measures to enhance device security.

Goal Reached Thanks to every supporter — we hit 100%!

Samsung Android 14/15 Security Bulletin: CVE-2025-21450 (KnoxVault OOB Write) & Galaxy Watch Fixes