Skip to content
OpenAdvisories
High · 8.4 CVE-2026-20990 EUVD-2026-12297GHSA-qvpq-w84x-6pgh

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitra…

Published Mar 16, 2026 · Updated Mar 17, 2026 · Assigned by SamsungMobile

Description

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Mar-2026 Release in Android 14, 15, 16

Advisories 2

References