The vulnerability is an out‑ofbounds write in the Samsung library libsmkvextractor.so. Prior to the SMR Oct‑2026 Release 1 firmware, a local attacker can trigger a buffer overflow that overwrites memory and enables the execution of arbitrary code. This flaw provides attackers with the ability to compromise system integrity and confidentiality by running malicious commands on the device, potentially leading to full system takeover if the device is compromised locally.

Samsung Mobile Devices running firmware versions released before the SMR Oct‑2026 Release 1 update are affected. The weakness resides in the libsmkvextractor.so component bundled with these firmware releases.

With a CVSS score of 7, this vulnerability is considered high severity. The EPSS score of 0.00174 indicates a very low but nonzero exploitation probability. It is not listed in the CISA KEV catalog, indicating no publicly known exploit at the time of analysis. The attack vector is local, requiring the attacker to obtain local access to the device or run code with sufficient privileges to manipulate the vulnerable library. Given the local nature of the exploit, the risk is significant for devices that can be accessed by an attacker, but public remote exploitation would require additional conditions not disclosed in the advisory.