Samsung LocationManager Privilege Escalation Vulnerability Allowing Access to Sensitive Information

A vulnerability exists in the LocationManager component of Samsung devices running Android versions 14, 15, and 16, prior to the May 2026 Security Maintenance Release. This vulnerability allows local attackers to access sensitive information due to incorrect privilege assignment. The issue arises from improper validation logic, which has been addressed in the latest security update.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users can apply the May 2026 Security Maintenance Release to address this vulnerability. This update is part of the regular monthly security update process and includes patches from both Google and Samsung.