This vulnerability involves improper input validation in Samsung Contacts versions before the SMR Aug-2026 Release 1. It enables a local attacker with limited privileges to delete files with the same privileges as the Samsung Contacts app. The CVSS 3.1 base score is 7.1, indicating a moderate severity level. The vulnerability is classified under CWE-20 (Improper Input Validation). No specific affected versions are provided, and no patch links or vendor advisories are included in the data.

A local attacker can exploit this vulnerability to delete files with the privileges of the Samsung Contacts application, potentially leading to denial of service or data loss within the context of the app's permissions. There is no indication of confidentiality or availability impact beyond the deletion of files, and no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Samsung's security advisories for updates and apply the SMR Aug-2026 Release 1 or later once available to remediate this issue.