Samsung Galaxy Watch sem_wifi Service Improper Access Control Vulnerability Allowing MAC Address Modification

A vulnerability exists in the sem_wifi service on Galaxy Watch devices running Android Watch 14, prior to the March 2025 Security Maintenance Release. This vulnerability allows privileged local attackers to change the MAC address of the watch. The issue stems from improper access control, which the latest security update addresses by implementing proper validation and access controls.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the MAC address on affected Galaxy Watch devices.

Remediation

Users can apply the March 2025 Security Maintenance Release to address this vulnerability. This update is part of the regular security update process for Samsung devices.