The flaw in Samsung System Support Service causes improper privilege management, permitting local users to invoke functions that require higher authority. This can lead to unauthorized manipulation or execution of privileged operations, compromising the integrity and confidentiality of device functions and user data.

Samsung Mobile devices running Samsung System Support Service versions earlier than 8.0.8.0 are affected.

With a CVSS score of 6.3 the vulnerability is assessed as moderate severity. An attacker must have local access to the device, as the flaw is exploitable only from within the device’s environment. No EPSS score is available and the issue is not listed in CISA KEV, indicating no widespread exploitation is reported yet. If an adversary gains local foothold, they can trigger privileged functions and potentially exploit further weaknesses.