Description
Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | GalaxyDiagnostics | — | 3.5.050 |
High · 8.7
CVE-2026-20987
EUVD-2026-5388GHSA-v9mc-rvmh-65r5
Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.
Published Feb 4, 2026 · Updated Feb 4, 2026 · Assigned by SamsungMobile