This vulnerability (CVE-2026-21012) involves external control of file name or path (CWE-73) in the AODManager component of Samsung Mobile Devices before the SMR April 2026 Release 1. A privileged local attacker can leverage this flaw to create files with system-level privileges, potentially impacting system integrity. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, high impact on confidentiality, and low impact on availability and integrity. No official fix or patch has been confirmed as of the published date.

The vulnerability allows a privileged local attacker to create files with system privileges by controlling file names or paths externally in the AODManager component. This could lead to unauthorized file creation at the system level, potentially affecting system integrity or behavior. However, exploitation requires already having privileged local access, limiting the scope of impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit privileged local access to trusted users only. Monitor for vendor updates regarding the SMR April 2026 Release 1 or subsequent patches addressing this issue.