Samsung AODManager External Control of File Name Vulnerability Allowing Privileged File Creation

A vulnerability in AODManager has been identified, allowing privileged local attackers to create files with system privileges. This issue arises from external control of file names and affects versions prior to the Samsung Maintenance Release (SMR) in April 2026.

Impact

Exploitation of this vulnerability allows for the creation of files with system privileges, potentially leading to unauthorized access or modification of system files.

Remediation

Users can apply the Samsung April 2026 Security Maintenance Release, which includes the patch for this vulnerability.