Samsung UwbTest Improper Component Export Vulnerability Allowing UWB Activation

A vulnerability exists in the UwbTest application on Samsung devices running Android versions 13, 14, 15, and 16, prior to the January 2026 Security Maintenance Release. This vulnerability allows local attackers to enable Ultra Wideband (UWB) functionality by improperly exporting Android application components. The issue arises from inadequate validation of application component permissions, which could be exploited to manipulate UWB features.

Impact

Exploitation of this vulnerability could lead to unauthorized activation of UWB functionality, potentially allowing for misuse of UWB capabilities such as precise location tracking or interaction with UWB-enabled devices.

Remediation

Users can update to the January 2026 Security Maintenance Release to address this vulnerability. This update includes the necessary permission adjustments to mitigate the issue.