CVE-2025-21041

Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information

Medium · published September 3, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Published
2025-09-03T06:05Z
EPSS history
Timeline
  • 03 SEP 06:05Z
    Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information
    cvelistv5