This vulnerability involves an out-of-bounds write in the libmdnie.so library on Samsung Mobile Devices. It affects devices running software versions before the SMR September 2026 Release 1. Exploitation by a local attacker can lead to arbitrary code execution with system server privileges, posing a significant security risk. The CVSS 4.0 base score is 8.6, indicating high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows local attackers to execute arbitrary code with system server privileges, which could compromise the device's security and control critical system functions. This elevates the risk of privilege escalation and potential full device compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for suspicious activity related to libmdnie.so. Avoid installing untrusted applications or executing unverified code locally.