Samsung Members Improper Input Validation Vulnerability Allowing Cross-Profile Data Access

A vulnerability exists in Samsung Members prior to version 5.2.00.12, where improper input validation allows physical attackers to access data across multiple user profiles. This issue arises from inadequate validation of user input, enabling unauthorized data access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to personal data across different user profiles on the device.

Remediation

Users can update to Samsung Members version 5.2.00.12 or later to address this vulnerability.