Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-21023 EUVD-2026-26192GHSA-pg82-7v49-4hr5

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify th…

Published Apr 29, 2026 · Updated Apr 29, 2026 · Assigned by SamsungMobile

Description

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — —

References