The vulnerability arises within Samsung’s S Share feature of the Android operating system, allowing private information to be unintentionally exposed before the April 2026 SMR Release 1 update. An attacker positioned near the device can access this data, potentially revealing personal or device‑specific details. This flaw involves insufficient controls over who may read the shared content, resulting in a breach of confidentiality while leaving integrity and availability unaffected.

Samsung Mobile Devices that run Android 14.0, Android 15.0 or Android 16.0, and have not yet received the April 2026 SMR Release 1 update. All models equipped with the S Share capability are impacted until the security patch is installed.

The reported impact score of 5.1 denotes a moderate risk level. The probability of exploitation is low, with very few recent attacks observed. The vulnerability is not listed in CISA’s known exploited vulnerabilities catalog, indicating that large‑scale exploitation has not yet occurred. The likely attack scenario requires physical or local proximity to the device, often involving a user‑initiated sharing action or nearby file access.