Visual Voicemail
Monthly
Samsung Mobile Visual Voicemail for Android prior to version 20.1.00.05 improperly exports application components, allowing a co-installed malicious app on the same device to trigger outgoing calls without holding the required Android CALL_PHONE permission. The CVSS 4.0 score of 4.8 (AV:L/PR:L) accurately reflects the local-only, low-privilege attack surface. Samsung has released a patched build (20.1.00.05) in its September 2026 mobile security bulletin, and no public exploit code has been identified at time of analysis.
Samsung Mobile Visual Voicemail for Android prior to version 20.1.00.05 improperly exports application components, allowing a co-installed malicious app on the same device to trigger outgoing calls without holding the required Android CALL_PHONE permission. The CVSS 4.0 score of 4.8 (AV:L/PR:L) accurately reflects the local-only, low-privilege attack surface. Samsung has released a patched build (20.1.00.05) in its September 2026 mobile security bulletin, and no public exploit code has been identified at time of analysis.