CVE-2025-20897

—

CVSS 3.1

6.8 medium

EPSS

<1%p5

Published

Feb 4, 2025 (Feb 4, 2025)

Modified

Jun 17, 2026

Description

Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows local attacker to access data in Secure Folder.

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.