CVE-2025-57836

High

Published: 05/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

In Samsung Magician versions 6.3.0 through 8.3.2 on Windows, the installer creates a temporary folder with weak permissions during installation. This allows a non-admin user to perform DLL hijacking and escalate privileges.

Risk Assessment

The risk is that a local non-admin user can hijack the installation process and gain elevated privileges, potentially leading to full system compromise.

Recommendation

It is recommended to update Samsung Magician to a version newer than 8.3.2 if available, and to restrict installation of software by non-privileged users. Additionally, monitor permissions of temporary folders during installation.

Other vulnerabilities in Samsung Magician

CVE-2017-3218High
Samsung Magician version 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician used HTTP for software updates.

Original NVD description (English source)

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.