EUVD-2026-42823
GHSA-q229-c824-2mg9
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector with no privileges required; impact is file creation within the app sandbox only, yielding low integrity and availability impact with no confidentiality breach.
Primary rating from Vendor (samsung).
CVSS VectorVendor: samsung
Lifecycle Timeline
1DescriptionCVE.org
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.
AnalysisAI
Improper input validation in Samsung Email prior to version 6.2.13.1 enables local attackers to create arbitrary files within the application's Android sandbox, affecting integrity and availability of the email client. The attack is confined to the Samsung Email sandbox by Android's isolation model and cannot directly escalate to system-level or cross-application impact. No public exploit has been identified and the vulnerability is not listed in CISA KEV; Samsung has released a confirmed fix in version 6.2.13.1.
Technical ContextAI
Samsung Email is Samsung's native email client pre-installed on Galaxy and other Samsung Android devices. The flaw arises from improper input validation - no CWE has been formally assigned, but the behavior is consistent with CWE-20 (Improper Input Validation), where attacker-controlled data is not sufficiently sanitized before being used in file system operations. The Android sandbox model constrains the blast radius: arbitrary file creation is limited to the app's private data directory and cannot directly reach other apps' sandboxes or OS-level paths. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:N) indicates a local, low-complexity attack requiring no privileges and no user interaction, consistent with a malicious application or a locally-present attacker triggering the flaw via crafted input to the email client.
RemediationAI
Update Samsung Email to version 6.2.13.1 or later - this is a vendor-released patch confirmed by Samsung's security team (mobile.security@samsung.com) and the EUVD entry. The update is available via the Samsung Galaxy Store or Google Play Store; users should check for app updates under their device's application manager. If immediate update is not possible, restricting installation of untrusted third-party applications (or enabling Google Play Protect) reduces the attack surface, since local exploitation likely requires a co-installed malicious app. Note that disabling Samsung Email entirely and using an alternative email client also eliminates exposure, though this may affect Samsung-integrated features such as Knox mail policies. Full details are available in Samsung's advisory at https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=07.
Arbitrary file write as SYSTEM in Samsung MagicINFO 9 Server before version 21.1050 allows remote attackers to place att
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an un
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary
Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today