Improper handling of exceptional conditions in the Recents feature of Samsung Mobile Devices allows a physical attacker to bypass application pinning. This flaw disables the check that normally prevents unauthorized applications from being pinned, enabling a malicious app to replace or masquerade as a pinned app. The consequence is that an attacker who gains physical access to the device can potentially elevate privileges or compromise applications that rely on pinning for security, affecting confidentiality, integrity, or functionality of the pinned apps.

Samsung Mobile Devices that run firmware versions before SMR Apr-2026 Release 1. The vulnerability affects the Recents component responsible for managing application pinning on these devices.

The severity score of 4.1 indicates moderate overall impact. The exploitation probability is very low, with a score below 1%, and the issue is not listed in the CISA KEV catalog. The attack vector is inferred to be physical, requiring direct access to the device. Because the flaw permits bypassing app pinning, an attacker could take advantage of the device’s user context once they have physical possession, but no remote exploitation is possible as described. The risk remains primarily limited to environments where devices are not physically secured or where users are likely to leave devices unattended.