Technical impact
A local attacker who can interact with the device is able to misuse AppBlock, a feature in Samsung Mobile Devices, to launch arbitrary activities that normally would require proper authorization. This flaw stems from an improper authorization check that allows privileged actions to be performed without the expected permissions. The result is that malicious code could invoke any system activity, potentially leading to unintended behavior or data exposure.
Affected Systems
All Samsung mobile devices that run AppBlock prior to the SMR Jun‑2026 Release 1 are affected. No specific device models or operating‑system versions are listed, so the vulnerability should be assumed to impact every device using the aforementioned component. The lack of detailed version information means vulnerable devices cannot be identified without consulting Samsung’s release notes for the SmR Jun‑2026 Release 1 update.
Risk and Exploitability
The CVSS score of 5.2 indicates a moderate level of severity. The EPSS score is very low, less than 1 percent, meaning a small but non‑zero likelihood of exploitation. Since the vulnerability is not listed in the CISA KEV catalog, no known widespread exploitation is documented. The flaw requires local access and user interaction to trigger. While the attack surface is limited, the ability to launch arbitrary activities could allow an attacker to perform privileged actions, potentially causing data exposure or system instability. Therefore the risk remains moderate but warrants timely patching.
