This vulnerability is a use‑after‑free flaw in the WSM service on Samsung Mobile devices. The flaw can be triggered by a local attacker who abuses freed memory to run arbitrary code with system privileges. The weakness corresponds to CWE‑416 and can compromise both the confidentiality and integrity of the device.

The flaw affects Samsung Mobile devices. No specific firmware versions are listed in the advisory, so all devices running the WSM service before the Oct-2026 Release 1 patch are considered vulnerable.

The CVSS score of 8.9 classifies the issue as high risk and the vulnerable code is reachable only by local attackers, therefore the practical attack vector is local. The EPSS score is not available and the vulnerability is not listed in CISA KEV, but the severity indicates a potentially serious threat if an attacker gains local access.