Samsung Wallpaper Service Path Traversal Vulnerability Allowing Privileged File Access

A path traversal vulnerability has been identified in the Wallpaper service on Samsung devices, affecting several different versions of Android. This vulnerability allows local privileged attackers to access files with system server privileges. The issue arises from improper input validation, which creates an opportunity for unauthorized file access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files with system server privileges, potentially allowing for further privilege escalation or manipulation of sensitive system data.

Remediation

Users can apply the July 2026 Security Maintenance Release, which includes a patch for this vulnerability, by updating their devices through the Samsung Smart Switch application or via the Settings menu under Software Update.