Skip to content
OpenAdvisories
Low · 2.3 CVE-2026-20969 EUVD-2026-1796GHSA-f43f-xc66-f5hm

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User i…

Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jan-2026 Release in Selected Android 13, 14, 15, 16 devices

Advisories 1

References