EUVD-2026-34796
GHSA-jvgc-m9mp-hwqr
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (SamsungMobile).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
AnalysisAI
Improper privilege handling in Samsung's SecTelephonyProvider component allows local attackers on Samsung Mobile Devices to access files that should be restricted to privileged processes. Affected devices run Android 14, 15, and 16 prior to the SMR Jun-2026 Release 1 patch, spanning the full current Samsung Android support matrix. No public exploit code exists and no KEV listing has been issued; the CVSS 4.0 score of 4.6 reflects constrained real-world impact due to required local access and active user interaction.
Technical ContextAI
SecTelephonyProvider is a content provider component within Samsung's proprietary Android system layer, responsible for managing telephony-related data and file access - including call logs, configuration data, and related privileged resources. The vulnerability arises from the component failing to correctly enforce access controls when a caller with insufficient privileges requests access to restricted telephony files, effectively permitting reads and writes that should be denied. Although the CWE field is listed as N/A by the reporter, the behavior is consistent with CWE-269 (Improper Privilege Management) or CWE-732 (Incorrect Permission Assignment for Critical Resource). The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:A) confirms a local, low-complexity attack path with no prerequisite privileges on the device and no special attack configuration required, though active user interaction must occur for the exploit to succeed.
RemediationAI
Apply Samsung's SMR Jun-2026 Release 1 security patch, which resolves the privilege handling flaw in SecTelephonyProvider across Android 14, 15, and 16. The official advisory is published at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=06. As compensating controls prior to patching, administrators managing Samsung device fleets via MDM (e.g., Samsung Knox) should enforce application allowlisting to prevent installation of untrusted or sideloaded apps, which are the most realistic vector for local exploitation - note that allowlisting may restrict legitimate employee-installed apps and requires policy review. Disabling USB debugging and enforcing device lock policies reduces the physical-access attack surface, with the trade-off of limiting developer and IT diagnostics workflows.
More in Samsung Mobile Devices
View allOut-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile
Remote code execution in Samsung Mobile Devices arises from a heap-based buffer overflow in the JPEG decoding path of li
Remote code execution in the DNG (Adobe Digital Negative) image decoder within Samsung's Quram imaging library (libimage
Path traversal in Samsung's ImsService (IP Multimedia Subsystem Service) on Android 14 through 17 permits remote unauthe
Out-of-bounds write in libmdnie.so on Samsung Mobile Devices running Android 15, 16, and 17 enables local attackers to e
Local privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
Improper input validation in Samsung's DualDAR kernel driver enables a local privileged attacker to escalate privileges
We need to produce a comprehensive analysis for CVE-2026-21047. Let's gather all provided data: CVE ID, description: "Ou
Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
Heap buffer overflow in Samsung KnoxVault trustlet (hwvault trusted application) on Samsung Mobile Devices prior to SMR
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today