This vulnerability involves improper export of Android application components in Samsung Contacts versions before SMR Aug-2026 Release 1. It enables local attackers to delete files with the privileges of the Samsung Contacts application. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity. No known exploits are reported in the wild, and no patch links or vendor advisories are provided in the data.

Local attackers can delete files with the privileges of the Samsung Contacts application, potentially leading to data loss or disruption of application functionality. The impact is limited to local attackers and does not involve remote exploitation or privilege escalation beyond the app's existing permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Samsung security advisories for updates related to SMR Aug-2026 Release 1. Until a fix is available, restricting local access to trusted users may reduce risk.