This vulnerability (CVE-2026-21026) arises from improper export of Android application components in the SpriteWallpaper application on Samsung Mobile Devices before the SMR Jun-2026 Release 1. It is classified under CWE-926 (Improper Export of Android Application Components). The issue allows local attackers to gain access to sensitive information by exploiting the misconfiguration of exported components. The CVSS 4.0 score of 6.4 reflects a medium severity with local attack vector and low complexity. No vendor remediation level or patch information is currently available.

Local attackers can exploit the improper export of application components to access sensitive information on affected Samsung Mobile Devices. The impact is limited to information disclosure without elevation of privileges or remote exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid running untrusted local applications and restrict physical or local access to affected devices where possible.