CVE-2025-58483

MediumCVSS 5.9

Published: 02/12/2025(UTC)Updated: 26/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Improper export of Android application components in Galaxy Store for Galaxy Watch before version 1.0.06.29 allows a local attacker to install arbitrary applications on Galaxy Store.

Risk Assessment

A local attacker could install malicious applications on Galaxy Watch, potentially compromising system integrity and stealing data.

Recommendation

Update Galaxy Store to version 1.0.06.29 or later to remediate the vulnerability.

Other vulnerabilities in Galaxy Store

CVE-2026-20976High
Galaxy Store prior to version 4.6.02 has improper input validation, allowing a local attacker to execute arbitrary script.

Original NVD description (English source)

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS