CVE-2025-20967 is a medium severity flaw (CVSS 5.1) in Samsung Gallery (Android 13 and 14). Samsung rates it Moderate in its May 2025 bulletin as SVE-2024-1514. Update Samsung Gallery (Android 13 and 14) to 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13) or 15.5.04.5 (Android 14) or later, or install the current version from the Galaxy Store or Play Store.
What's affected
- Product: Samsung Gallery (Android 13 and 14)
- Samsung bulletin ID: SVE-2024-1514, May 2025 update
- Fixed in: 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13) or 15.5.04.5 (Android 14)
- Reported to Samsung: 26 July 2024
- CVSS: 5.1 (Medium), vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - Published: 2025-05-07
Samsung describes the issue as: improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege of Samsung Gallery
Samsung says the patch adds proper access control. It does not say the flaw is exploited in the wild, and the CISA Known Exploited Vulnerabilities flag is false for this CVE.
How to check if you're exposed
Check the installed app version on the phone or tablet.
- Open Settings, then Apps, then Samsung Gallery, and scroll to the version number.
- Compare it with 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13) or 15.5.04.5 (Android 14). Anything older is affected.
- If you manage devices, pull the app version from your mobile device management console and filter for older builds.
From a computer with USB debugging enabled you can also read the version directly. The package name below is the one commonly used for this app, so confirm it on your device first.
adb shell dumpsys package com.sec.android.gallery3d | grep versionName
Keep in mind that the fixed version depends on your Android release and region, so read the right row for your device.
What to do now
- Update Samsung Gallery through the Galaxy Store or Play Store and confirm the version is 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13) or 15.5.04.5 (Android 14) or later.
- Turn on automatic updates for Samsung apps so the next bulletin lands without anyone remembering to act.
- If you manage a fleet, report on app versions in your MDM and push the update to devices that lag.
- Review the rest of Samsung's May 2025 bulletin, because it lists other fixes for the same cycle.
Why it matters
This record has no CWE assigned, so the class is taken from Samsung's description: improper access control. A component of the Gallery app can be reached by something that should not be allowed to use it. The result is read and write access to files with the rights of the Gallery app.
The score is 5.1 because the vector is local and the rated impact is limited to low confidentiality and integrity effects. The data a gallery holds, photos and their metadata, is personal, so the practical aim is simply to stay on the current app version. This CVE has two siblings in the same bulletin for the same app, CVE-2025-20968 and one covering access across user profiles.
Quick check
Which Gallery version should I have?
Samsung lists 14.5.10.3 for Global Android 13, 14.5.09.3 for China Android 13 and 15.5.04.5 for Android 14. Anything older is affected.
Is it exploited in the wild?
The CISA Known Exploited Vulnerabilities flag is false and the bulletin does not mention active exploitation.
Sources
Last reviewed: 19 October 2026.
