This vulnerability involves improper export of Android application components in Samsung Mobile's AppLock feature before the SMR Aug-2026 Release 1. The flaw allows physical attackers to bypass the app lock protection, potentially granting unauthorized access to locked applications. The issue is classified under CWE-926 (Improper Export of Android Application Components). The CVSS 4.0 score is 6.8 (medium severity) with attack vector physical, low attack complexity, no privileges or user interaction required, but high impact on confidentiality and integrity. No vendor advisory or patch information is currently available.

Physical attackers can bypass the app lock function on affected Samsung Mobile Devices, potentially gaining unauthorized access to applications that are intended to be protected. This could lead to exposure of sensitive data or unauthorized use of locked apps. The vulnerability impacts confidentiality and integrity but does not require network access or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published at this time. Users should monitor Samsung Mobile security advisories for updates and apply the SMR Aug-2026 Release 1 or later once available.