Executive brief
Samsung AppBlock, a security feature on mobile devices, contains a vulnerability that could allow a local attacker to bypass intended restrictions. By tricking a user into interacting with a malicious application, an attacker can launch unauthorized activities or functions on the device. This could lead to unauthorized access to device features or a compromise of the user's privacy and operational security.
Technical details
An improper authorization vulnerability exists in Samsung AppBlock prior to the SMR Jun-2026 Release 1. The flaw allows a local attacker with low privileges to bypass authorization checks and launch arbitrary Android activities. Exploitation requires user interaction, typically involving a victim performing a specific action that triggers the vulnerable path. Successful exploitation grants the attacker the ability to execute functions within the context of the AppBlock component, potentially leading to high confidentiality impact and limited integrity or availability impact. The issue is addressed in the Samsung June 2026 Security Maintenance Release.
Affected products
- Samsung AppBlock prior to SMR Jun-2026 Release 1
Timeline
- 2026-06-05: disclosed
- 2026-06-05: advisory
- 2026-06-05: patched: Included in SMR Jun-2026 Release 1