CVE-2026-21017
Received
Received - Intake
Insufficient Privilege Handling in SecTelephonyProvider
Publication date: 2026-06-05
Last updated on: 2026-06-05
Assigner: Samsung Mobile
Description
Description
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | sectelephonyprovider | to smr_jun-2026_release_1 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves improper handling of insufficient privileges in the SecTelephonyProvider component before the SMR June 2026 Release 1. It allows local attackers to access files that should be restricted to privileged users.
How can this vulnerability impact me? :
The vulnerability can allow a local attacker to gain unauthorized access to privileged files, potentially leading to information disclosure or unauthorized actions within the affected system.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70