This vulnerability (CVE-2026-21023) in Samsung Mobile Devices arises from insufficient verification of data authenticity within the PackageManagerService before the SMR March 2026 Release 1. It enables local attackers to alter installation restrictions on certain applications, potentially bypassing intended security controls. The CVSS 4.0 vector indicates local attack vector, low complexity, no privileges or user interaction required, and high impact on integrity. No vendor advisory or patch information is currently available, and no exploits have been observed in the wild.

The vulnerability allows a local attacker to modify installation restrictions on specific applications by exploiting insufficient data authenticity verification. This could lead to unauthorized installation or modification of applications, potentially undermining device security policies. However, exploitation requires local access and does not escalate privileges or require user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level has been provided by Samsung Mobile, users should monitor for updates from the vendor, particularly the SMR March 2026 Release 1 or later. Until a fix is available, restricting local access to trusted users and devices may reduce risk.