Samsung FactoryCamera Incorrect Default Permissions Vulnerability Allowing Access to Unique Identifier

A vulnerability exists in the FactoryCamera application on Samsung devices running Android versions 14, 15, and 16, prior to the May 2026 Security Maintenance Release. This vulnerability allows local attackers to access unique identifiers due to incorrect default permissions. The issue arises from a lack of proper access control, enabling unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to unique identifiers, potentially allowing for tracking or identification of users or devices.

Remediation

Users can update to the Samsung May 2026 Security Maintenance Release to address this vulnerability. This update includes the necessary patches to correct the permission issues in the FactoryCamera application.