Samsung Mobile Bluetooth Privilege Escalation Vulnerability in Maintenance Mode

A vulnerability exists in the Bluetooth component during Maintenance mode, prior to the April 2026 Security Maintenance Release. This issue allows physical attackers to bypass the Extend Unlock feature. The vulnerability arises from incorrect privilege assignments, which the latest security update addresses by implementing proper privilege controls.

Impact

Exploitation of this vulnerability allows physical attackers to bypass the Extend Unlock feature, potentially leading to unauthorized access or actions that require extended privileges.

Remediation

Users can apply the Samsung April 2026 Security Maintenance Release, which includes the necessary patch for this vulnerability.