BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-01-09

Assigner: Samsung Mobile

Description

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-01-09

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20972

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	uwbtest	to 2026-01-01 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves the improper export of Android application components in the UwbTest app prior to the SMR Jan-2026 Release 1. It allows local attackers to enable Ultra Wideband (UWB) functionality without proper authorization.

Impact Analysis

An attacker with local access could exploit this vulnerability to enable UWB functionality on the device without permission, potentially leading to unauthorized use of device features or exposure to further attacks leveraging UWB capabilities.

Hi! I’m here to help you understand CVE-2026-20972. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70