Technical impact
AuditLogService in Samsung Mobile Devices implements an improper access control mechanism that allows local users to read audit logs that should be protected. The vulnerability enables a local attacker to retrieve confidential audit data without needing elevated privileges, potentially exposing proprietary or personal information stored in the logs.
Affected Systems
Samsung Mobile Devices running Android 16.0 firmware versions prior to the Jun‑2026 SMR Release 1 are affected. All devices with SMR releases up to that point are potentially vulnerable.
Risk and Exploitability
The CVSS score of 5.1 denotes a medium severity issue, and the EPSS score of < 1 % indicates a low probability of exploitation. The flaw is not listed in the CISA KEV catalog, and the attack vector is local; an attacker must already have physical or local access to the device to exploit it. Consequently, the overall risk is moderate, with potential confidentiality loss if sensitive audit information is present.
