Threat Entry Updated 2026-01-15

CVE-2026-20971 - Samsung Mobile Devices Plugin

Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.

PLUGIN Samsung Mobile Devices

CVE-2026-20971

HIGH CVSS 7.3 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-01-15

CVE-2026-20970 - Samsung Mobile Devices Plugin

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.

PLUGIN Samsung Mobile Devices

CVE-2026-20970

MEDIUM CVSS 6.8 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-01-15

CVE-2026-20968 - Samsung Mobile Devices Plugin

Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.

PLUGIN Samsung Mobile Devices

CVE-2026-20968

MEDIUM CVSS 6.7 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-02-02

CVE-2026-20973 - Samsung Mobile Devices Plugin

Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.

PLUGIN Samsung Mobile Devices

CVE-2026-20973

MEDIUM CVSS 5.3 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-02-02

CVE-2026-20974 - Samsung Mobile Devices Plugin

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.

PLUGIN Samsung Mobile Devices

CVE-2026-20974

MEDIUM CVSS 5.2 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-01-15

CVE-2026-20972 - Samsung Mobile Devices Plugin

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.

PLUGIN Samsung Mobile Devices

CVE-2026-20972

MEDIUM CVSS 4.8 2026-01-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-01-15

CVE-2026-20969 - Samsung Mobile Devices Plugin

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.

PLUGIN Samsung Mobile Devices

CVE-2026-20969

LOW CVSS 2.3 2026-01-09

Risk Score

Open Full Technical Breakdown