Technical impact
Samsung Auto components are improperly exported in versions prior to 3.1.2.61 on Android 15 and 3.2.0.38 on Android 16, allowing a local attacker to modify the device's audio settings. An attacker who can install or manipulate the application locally can change volume levels, mute audio, or alter audio routing, potentially disrupting user experience or enabling further local attacks. The flaw does not provide remote code execution or privilege escalation beyond the device's user context.
Affected Systems
All Samsung Auto installations running Android 15 with version 3.1.2.61 or earlier, and Android 16 with version 3.2.0.38 or earlier are affected.
Risk and Exploitability
The CVSS score of 4.8 indicates moderate severity, and the EPSS score of < 1% indicates very low exploitation probability, suggesting limited exploitation data at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access to the device or the ability to run unauthorized code within the Samsung Auto application; it is not remotely exploitable under the current description.
