BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-02-02

Assigner: Samsung Mobile

Description

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-02-02

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20974

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	android	13.0
samsung	android	14.0
samsung	android	15.0
samsung	android	16.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Impact Analysis

An attacker with physical access could exploit this vulnerability to bypass Carrier Relock, potentially allowing unauthorized use or unlocking of the device on different carriers.

Executive Summary

This vulnerability is caused by improper input validation in data related to network restrictions before the SMR Jan-2026 Release 1. It allows physical attackers to bypass the Carrier Relock feature.

Hi! I’m here to help you understand CVE-2026-20974. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70