Samsung Mobile Settings Improper Authorization Vulnerability Allowing Background Data Configuration Changes

A vulnerability exists in the Settings application of Samsung Mobile devices running Android versions 13 through 16, prior to the March 2026 Security Maintenance Release. This vulnerability allows local attackers to disable the option for users to manage background data usage for applications. The issue arises from improper authorization, which the latest security update addresses by implementing the necessary authorization controls.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in application data management, potentially causing apps to use background data without user consent or awareness.

Remediation

Users can update their devices to the March 2026 Security Maintenance Release to address this vulnerability.