BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-01-09

Assigner: Samsung Mobile

Description

Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-01-09

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20971

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	proca	to 2026-01-01 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Use After Free issue in the PROCA driver prior to the SMR Jan-2026 Release 1. It allows local attackers to potentially execute arbitrary code on the affected system.

Impact Analysis

The vulnerability can allow a local attacker to execute arbitrary code, which could lead to unauthorized actions, system compromise, or further exploitation of the affected device.

Hi! I’m here to help you understand CVE-2026-20971. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70