The vulnerability is a path traversal flaw in Samsung Members prior to Chinese version 15.5.05.4. An attacker with local device access can craft a filename that escapes the application’s data directory, allowing the application to overwrite arbitrary files stored within Samsung Members. This compromise can be used to replace configuration, user data, or other files, thereby corrupting the integrity of the application’s data and potentially affecting user experience.

Samsung Mobile Chinese version customers who use Samsung Members older than 15.5.05.4 are impacted. All builds in the Chinese region before the patch are affected; users of newer builds or other regional releases are not affected.

The CVSS score of 5.1 marks moderate severity, and the EPSS score is under 1%, indicating a low current likelihood of exploitation. The vulnerability is not present in the CISA KEV catalog. Exploitation requires local code execution; a local attacker must be able to run commands or files with the same privileges as the Samsung Members application. If achieved, the attacker can overwrite files inside the app’s data directory, causing integrity loss. Devices with additional security controls or that have the patched version are inherently protected.