CVE-2026-21118
6.9MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-284
Impact
A local attacker with low-privilege access can bypass scoped storage restrictions to read and modify protected files on the device. Exploitation requires the attacker to already have execution privileges locally, such as via an installed app.
Root cause
Improper access control checks within the DownloadProvider component allow unauthorized access across scoped storage boundaries.
Affected systems
Samsung Android devices running software versions prior to SMR Oct-2026 Release 1.
CVSS v4.0 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Install the Samsung SMR Oct-2026 Release 1 firmware update (or later). No interim workaround is documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.