Samsung Mobile PACM Improper Input Validation Vulnerability Allowing Arbitrary Command Execution

A vulnerability exists in Samsung Mobile devices running Android 14, 15, or 16, specifically within the PACM component, prior to the February 2026 Security Maintenance Release. This vulnerability allows a physical attacker to execute arbitrary commands due to improper input validation. The issue has been privately disclosed and is part of a broader security update that includes patches for various vulnerabilities.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands, potentially allowing a physical attacker to manipulate device functionality or access sensitive information.

Remediation

Users can apply the February 2026 Security Maintenance Release to address this vulnerability. This update is part of the regular monthly security update process for Samsung Mobile devices.