This vulnerability involves improper input validation in Samsung Members, a Samsung Mobile application. Local attackers with limited privileges can exploit this flaw to access arbitrary URLs and launch arbitrary activities within the app context, potentially escalating their capabilities. The CVSS 4.0 score is 6.9 (medium severity), reflecting the local attack vector, low complexity, no user interaction, and high impact on authorization. The vulnerability affects versions prior to 5.8.01.5, but no specific affected versions are listed. No official remediation or patch information is currently available.

Successful exploitation allows a local attacker to leverage Samsung Members privileges to access arbitrary URLs and launch arbitrary activities, which could lead to unauthorized actions within the app. The impact is limited to local attackers with some privileges and does not require user interaction. There is no indication of remote exploitation or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users and monitor for unusual activity related to Samsung Members. Avoid granting unnecessary privileges to local users. Follow updates from Samsung Mobile for any official patches or mitigations.