Vulnerability Description
Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Wear Os | 5.0 |
| Samsung | Galaxy Watch | - |
| Samsung | Galaxy Watch 4 | - |
| Samsung | Galaxy Watch 4 Classic | - |
| Samsung | Galaxy Watch 5 | - |
| Samsung | Galaxy Watch 5 Pro | - |
| Samsung | Galaxy Watch 6 | - |
| Samsung | Galaxy Watch 6 Classic | - |
| Samsung | Galaxy Watch 7 | - |
| Samsung | Galaxy Watch Fe | - |
| Samsung | Galaxy Watch Ultra | - |
References
FAQ
What is CVE-2025-20946?
CVE-2025-20946 is a vulnerability with a CVSS score of 8.8 (HIGH). Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetoo...
How severe is CVE-2025-20946?
CVE-2025-20946 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-20946?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Wear Os, Samsung Galaxy Watch, Samsung Galaxy Watch 4, Samsung Galaxy Watch 4 Classic, Samsung Galaxy Watch 5.