BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-01-09

Assigner: Samsung Mobile

Description

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-01-09

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20970

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	s_location	to 2026-01-01 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an improper access control issue in the SLocation component prior to the SMR Jan-2026 Release 1. It allows local attackers with limited privileges to execute privileged APIs that they should not have access to.

Impact Analysis

The vulnerability can allow a local attacker to execute privileged APIs, potentially leading to unauthorized actions or access within the affected system, which could compromise system integrity or security.

Hi! I’m here to help you understand CVE-2026-20970. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70