Samsung Mobile Security: SMR-MAR-2025, SVE-2024-2271 (CVE-2025-20908)

Summary

Samsung's March 2025 bulletin records an Auracast random-value weakness in its Android 14 and 15 software and states that the maintenance release improves random-value generation.

Key findings

• The March 2025 entry identifies SVE-2024-2271 as CVE-2025-20908 and lists Android 14 and 15 as affected versions.
• Samsung says insufficiently random values before SMR Mar-2025 Release 1 let a nearby attacker access an Auracast broadcast. It states that the patch improves the use of random values.
• The bulletin rates the issue Moderate, records a report date of 4 December 2024, and credits Frieder Steinmetz and Dennis Heinze.

Limits

Manufacturer account of its own software. The bulletin describes unauthorized access, without a measured stream-takeover result, installed venue tests or a list of affected venue transmitters. Month precision comes from the maintenance-release heading; the earlier report date is not its publication date. The returned page includes the year's other bulletins; only the March introduction and relevant entry were used.

Read the original

security.samsungmobile.com/securityUpdate.smsb?year=2025&month=03

Link checked 13 October 2026. We link to the original and do not host copies.

Cited in

• Can venue broadcasts be spoofed, hijacked or jammed, and what protects them?Partly answered

Cite this source

The accessed date is when this library last checked the link; use the date you read it. To point readers to this summary instead, link to https://assistivelisteningknowledgebase.org/evidence/samsung-2025-auracast-security-update/

Every finding here cites its source, and who funded each source is labelled. This site does not recommend products. Found an error or a missing study? Suggest a correction.