This vulnerability is an out-of-bounds write in the libpadm.so library component of Samsung Mobile Devices. It affects devices running software versions before the SMR Jul-2026 Release 1. The flaw enables local attackers with low privileges to execute arbitrary code, potentially compromising device integrity. The CVSS 4.0 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no user interaction required, and high impact on confidentiality and integrity. No official patch or remediation level has been confirmed in the provided data.

Successful exploitation allows a local attacker with limited privileges to execute arbitrary code on the affected Samsung Mobile Device. This can lead to unauthorized control over the device, potentially compromising confidentiality and integrity of data. The vulnerability does not require user interaction and has high impact on confidentiality and integrity, making it a significant security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to SMR Jul-2026 Release 1, updating to this release or later is likely the intended fix once officially confirmed. Until then, restrict local access to trusted users only and monitor vendor communications for patch availability.