Samsung Mobile PENUP

• CVE-2025-20978 Medium 6.2 Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege. 0.1%
• CVE-2021-25463 Medium 4.0 Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview. 0.2%