Samsung Auto components are improperly exported in versions prior to 3.1.2.61 on Android 15 and 3.2.0.38 on Android 16, allowing a local attacker to modify the device’s audio settings. An attacker who can install or manipulate the application locally can change volume levels, mute audio, or alter audio routing, potentially disrupting user experience or enabling further local attacks. The flaw does not provide remote code execution or privilege escalation beyond the device’s user context.

All Samsung Auto installations running Android 15 with version 3.1.2.61 or earlier, and Android 16 with version 3.2.0.38 or earlier are affected.

The CVSS score of 4.8 indicates moderate severity, and the EPSS score is unavailable, suggesting limited exploitation data at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access to the device or the ability to run unauthorized code within the Samsung Auto application; it is not remotely exploitable under the current description. Attacks are likely to be opportunistic and conducted by users who have physical access or by malicious apps installed through the Play Store or custom firmware.