Executive brief
Samsung Collection is a system application on Android 15 and 16 devices. A flaw in access controls allows local attackers to read sensitive information without authorization, potentially exposing private user data stored within the app.
Technical details
This vulnerability is an improper access control flaw in Samsung Collection that allows local attackers to access sensitive information. The vulnerability affects Collection prior to version 1.0.1.14 in Android 15 and prior to version 2.0.02.7 in Android 16. The attack requires local access to the device (local attack vector). The patch adds proper access control mechanisms to restrict unauthorized access to protected data.
Affected products
- Samsung Collection prior to 1.0.1.14 (Android 15) and prior to 2.0.02.7 (Android 16)
- Google Android 15, 16
Timeline
- 2026-09-09: disclosed
- 2026-09: patched: Patches available: version 1.0.1.14 for Android 15, version 2.0.02.7 for Android 16