---
id: 5665
title: "[CVE-2025-10891] Patch gap to mobile renderer RCE: pwning Samsung Internet’s V8 on the Galaxy S25"
cve: CVE-2025-10891
source_domain: osec.io
source_url: "https://osec.io/blog/patch-gap-to-mobile-renderer-rce/"
published_at: "2026-04-01T12:00:00Z"
tags: ["rce", "xss", "mobile-security", "v8", "n-day", "samsung-internet"]
phying_url: "https://phying.com/item/5665"
lang: en
---

# [CVE-2025-10891] Patch gap to mobile renderer RCE: pwning Samsung Internet’s V8 on the Galaxy S25

## Summary

OtterSec exploits a six-month-old V8 (CVE-2025-10891) in Samsung Internet on the Galaxy S25, achieving renderer RCE and universal XSS via the n-day patch gap.

## Intelligence Metadata

- **Sources:** osec.io
- **CVE:** CVE-2025-10891
- **Published:** 2026-04-01T12:00:00Z
- **Original:** https://osec.io/blog/patch-gap-to-mobile-renderer-rce/
- **Phying News:** https://phying.com/item/5665