Medium

Samsung Galaxy S25 Smart Touch Call URL Parameter Information Disclosure

IdentifiersCVE-2025-58488CWE-940

CVE-2025-58488 is an information disclosure vulnerability in Samsung Galaxy S25 Smart Touch Call prior to version 1.0.1.1. The flaw is described as improper verification of the source of a communication channel and, per the supporting context, exists in the application's handling of URL parameters. Because the application does not enforce sufficient protections before allowing access to functionality, a remote attacker can cause the application to expose sensitive information. The disclosed material can include stored credentials. Exploitation requires user interaction, specifically that the target visit a malicious page or open a malicious file that triggers the vulnerable URL-parameter handling path.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation allows a remote attacker to disclose sensitive information from the affected device, including stored credentials. Exposure of credentials can enable follow-on compromise of user accounts, unauthorized access to additional services or application data, and broader compromise depending on credential reuse and the privileges associated with the exposed secrets. The available information characterizes the issue primarily as confidentiality impact, with limited availability impact reflected in the cited CVSS vector.

Mitigation

If you can’t patch tonight, do this now.

If the vendor update cannot be applied immediately, reduce exposure by limiting or disabling workflows that allow Smart Touch Call to be invoked through untrusted links, web content, or externally supplied files where feasible. Instruct users not to open untrusted files or visit untrusted pages on affected devices, since exploitation requires user interaction. Enterprise defenders should also use mobile application control, web filtering, and device management policies to restrict delivery of malicious pages/files to affected Galaxy S25 devices until the patch is deployed.

Remediation

Patch, then assume compromise.

Update Samsung Smart Touch Call to version 1.0.1.1 or later. Samsung has released a vendor fix and published remediation details through its security portal for 2025/12. Apply the latest Samsung security updates for the Galaxy S25 to ensure the vulnerable URL-parameter handling and associated access-control/protection checks are corrected.

PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType

Samsung ElectronicsSmart Touch Callapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

ACTIVITY FEED

Recent activity

3 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.

3 SOURCESView more in app

No news coverage yet. Advisories and community discussion only.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity2

Community discussion across Reddit, Mastodon, and other social sources.

EXTERNAL REFERENCES

MITRE CVE

cve.org · CVE-2025-58488

NVD

nvd.nist.gov/vuln/detail/CVE-2025-58488

MITRE CWE · CWE-940

cwe.mitre.org

Vendor Advisory

security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12