What is the CVSS score of CVE-2025-58483?

CVE-2025-58483 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Galaxy Store are affected by CVE-2025-58483?

Organizations using Galaxy Store for Galaxy Watch should be aware of moderate risk from CVE-2025-58483 rated CVSS 5.9. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-58483?

Within 30 days: Identify affected systems running Galaxy Store for Galaxy Watch and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Galaxy Store CVE-2025-58483

EUVD-2025-200135 MEDIUM

2025-12-02 mobile.security@samsung.com

Information Disclosure Galaxy Store Android Samsung

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 14:04 euvd

EUVD-2025-200135

Analysis Generated

Mar 15, 2026 - 14:04 vuln.today

CVE Published

Dec 02, 2025 - 02:15 nvd

MEDIUM 5.9

DescriptionCVE.org

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.

AnalysisAI

A security vulnerability in Galaxy Store for Galaxy Watch (CVSS 5.9) that allows local attacker. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects Galaxy Store for Galaxy Watch.

RemediationAI

Monitor vendor channels for patch availability.

More in Galaxy Store

View all

CVE-2023-42580 CRITICAL Act Now

9.8 Dec 05

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute Ja

CVE-2023-21516 CRITICAL Act Now

9.6 May 26

XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API

CVE-2023-21515 HIGH This Week

8.8 May 26

InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 al

CVE-2023-21514 HIGH This Week

8.8 May 26

Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execu

CVE-2026-20976 HIGH This Week

7.8 Jan 09

Galaxy Store versions up to 4.6.02 contains a vulnerability that allows attackers to execute arbitrary script (CVSS 7.8)

CVE-2023-21433 HIGH This Week

7.8 Feb 09

Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applic

CVE-2022-33710 HIGH This Week

7.8 Jul 12

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows loca

CVE-2022-33709 HIGH This Week

7.8 Jul 12

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local a

CVE-2022-33708 HIGH This Week

7.8 Jul 12

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local a

CVE-2022-28776 HIGH This Week

7.8 Apr 11

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications

CVE-2023-42581 HIGH This Week

7.5 Dec 05

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute

CVE-2026-21000 HIGH This Week

7.0 Mar 16

Galaxy Store versions prior to 4.6.03.8 contain an access control flaw that enables local attackers to create files with

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-58483 vulnerability details – vuln.today

Back

Galaxy Store CVE-2025-58483

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Galaxy Store

Same technique Information Disclosure

Share

External POC / Exploit Code