Technical impact
The vulnerability is caused by improper input validation in the Samsung Android USB Driver for Windows before version 1.9.5.0. An attacker who can supply crafted input to the driver can cause the driver to read or otherwise access memory beyond the intended bounds, potentially leading to memory corruption, application or driver crashes, and possibly escalation of privileges if the driver runs with high privileges. The weakness is a classic input validation flaw that can result in out-of-bounds memory access.
Affected Systems
On Windows systems that have the Samsung Android USB Driver for Windows installed, any version earlier than 1.9.5.0 is vulnerable. The driver is used to connect Samsung Android devices via USB, and administrators should verify which installed version is present on each workstation or server.
Risk and Exploitability
The CVSS score of 5.9 indicates moderate severity. The EPSS score of < 1% and the fact that the vulnerability is not listed in CISA’s KEV catalog suggest a limited but non-negligible risk of exploitation. The attack vector is local: an attacker must be able to run code on the affected machine to supply the malicious data. Without a verified exploit or documented impact beyond corruption, the likelihood of successful exploitation remains uncertain, but because the driver often runs with elevated privileges, the potential impact should not be ignored.
