Local Information Disclosure via Improper Export of Android ImsSettings Components

Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.

Improper Privilege Handling in SecTelephonyProvider

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.

Improper Authorization in Samsung AppBlock Allows Local Arbitrary Activity Launch

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

Out-of-bounds Write in SveService Enables Arbitrary Code Execution

Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.

FactoryCamera Default Permissions Allow Local Disclosure of Device Identifier

Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.

Local Privilege Escalation via LocationManager on Samsung Android Firmware

Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

Local Permissions Bypass in Samsung Mobile Routines Exposes Sensitive Data

Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

Improper Export of OmaCP Application Components Enables Local Privilege Escalation

Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.

Improper Input Validation Allows Physical Privilege Escalation on Samsung Devices

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.

Local Privilege Escalation via Improper Privilege Management in Samsung System Support Service

Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions.

Local Arbitrary Code Execution via Improper Input Validation in Galaxy Watch FacAtFunction

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.

DoS caused by 5G NR NAS Registration Accept Message Handling

An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, W920, W930, W1000, Modem 5123, and Modem 5300. Incorrect handling of 5G NR NAS registration accept messages leads to a Denial of Service.

Local Privileged Command Execution via Improper Input Validation in Samsung GalaxyDiagnostics

Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.

Local Attackers Can Access Device Location via Samsung Camera Improper Access Control

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

Galaxy Wearable Permission Handling Vulnerability Enables Local Information Disclosure

Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local attackers to access sensitive information.

Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.

Incorrect Default Permissions in Samsung Galaxy Wearable Firmware Allow Local Information Disclosure

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.

Physical Bypass of App Pinning via Recents Exception Handling

Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.