This vulnerability arises from improper export of Android application components within the Galaxy Editing Service on Samsung Mobile Devices before the SMR Jun-2026 Release 1. Such improper export can allow a local attacker with limited privileges to perform privileged operations, potentially escalating their capabilities on the device. The CVSS 4.0 base score is 6.8, indicating a medium severity level. The vulnerability is classified under CWE-926, which concerns improper export of components that can lead to unauthorized access or actions. No vendor advisory or patch information is currently available, and no known exploits have been reported.

A local attacker with limited privileges on affected Samsung Mobile Devices could exploit this vulnerability to execute privileged operations, potentially leading to unauthorized actions or escalation of privileges. The impact is limited to local attackers and does not require user interaction. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided, users and administrators should monitor Samsung Mobile's security advisories for updates and apply the SMR Jun-2026 Release 1 or later once available to address this issue.