This vulnerability involves improper input validation in Samsung Message versions before SMR Aug-2026 Release 1. It enables physical attackers to access sensitive information on the device. The CVSS 3.1 base score is 4.6, reflecting a medium severity with attack vector as physical, low attack complexity, no privileges or user interaction required, and impact limited to confidentiality. No vendor advisory or patch information is available to confirm remediation status.

An attacker with physical access to the affected device can exploit this vulnerability to gain access to sensitive information stored or processed by Samsung Message. The vulnerability does not affect system integrity or availability. Confidentiality is impacted, potentially exposing private user data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict physical access to affected devices to mitigate risk.