Samsung ClipboardService Insufficient Permission Vulnerability Allowing Cross-User Image File Access

A vulnerability exists in the ClipboardService component of Samsung devices, specifically in versions prior to the SMR April 2025 Release 1. This vulnerability arises from improper handling of permissions, allowing local attackers to access image files across multiple user accounts. Exploitation of this issue requires user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to image files across different user accounts on the device.

Remediation

Users can apply the SMR April 2025 Release 1 update to address this vulnerability.