Hsia.Angsh

**Name of the Vulnerable Software and Affected Versions** ImsService versions prior to SMR Sep-2025 Release 1 **Description** The vulnerability involves improper handling of insufficient permission within ImsService, potentially allowing local attackers to interrupt calls. **Recommendations** Update ImsService to SMR Sep-2025 Release 1 or later.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 16 **Description** The Secure Folder feature exhibits insecure storage of sensitive information, potentially allowing local attackers to gain unauthorized access to this data. **Recommendations** Update to Android version 16 or later.

**Name of the Vulnerable Software and Affected Versions** S Assistant versions prior to 9.3.2 **Description** Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. **Recommendations** Update S Assistant to version 9.3.2 or later.

**Name of the Vulnerable Software and Affected Versions** S Assistant versions prior to 9.3.2 **Description** Improper verification of intent by the `SystemExceptionalBroadcastReceiver` component allows local attackers to modify itinerary information. **Recommendations** Update S Assistant to version 9.3.2 or later.

**Name of the Vulnerable Software and Affected Versions** S Assistant versions prior to 9.3.2 **Description** Improper verification of intent by `SamsungExceptionalBroadcastReceiver` allows local attackers to modify itinerary information. **Recommendations** Update S Assistant to version 9.3.2 or later.

**Name of the Vulnerable Software and Affected Versions** ImsService versions prior to SMR Sep-2025 Release 1 **Description** Improper verification of intent by a broadcast receiver in ImsService allows local attackers to temporarily disable the SIM. **Recommendations** Update ImsService to SMR Sep-2025 Release 1 or later.

**Name of the Vulnerable Software and Affected Versions** SamsungAccount versions prior to SMR Aug-2025 Release 1 **Description** Improper privilege management exists in SamsungAccount, potentially allowing local privileged attackers to deactivate a Samsung account. **Recommendations** Update SamsungAccount to SMR Aug-2025 Release 1 or later.

Name of the Vulnerable Software and Affected Versions: Framework for Galaxy Watch versions prior to SMR Jul-2025 Release 1 Description: The issue is related to incorrect default permissions in the Framework for Galaxy Watch, allowing local attackers to reset some configurations of the Galaxy Watch. Recommendations: For versions prior to SMR Jul-2025 Release 1, update to SMR Jul-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Galaxy Watch to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: LeAudioService versions prior to SMR Jul-2025 Release 1 Description: The issue is related to improper access control in LeAudioService, allowing local attackers to stop broadcasting Auracast. Recommendations: For versions prior to SMR Jul-2025 Release 1, update to SMR Jul-2025 Release 1 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: LeAudioService versions prior to SMR Jul-2025 Release 1 Description: The issue is related to improper access control in LeAudioService, which allows local attackers to manipulate broadcasting Auracast. Recommendations: For versions prior to SMR Jul-2025 Release 1, update to SMR Jul-2025 Release 1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Find versions prior to SMR Feb-2025 Release 1 **Description** The issue is related to improper privilege management, allowing local privileged attackers to disable Samsung Find. This can be exploited by attackers with local access and sufficient privileges. **Recommendations** For Samsung Find versions prior to SMR Feb-2025 Release 1, update to SMR Feb-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting local access to the device and limiting privileges to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android 12 versions prior to SMR Sep-2024 Release 1 Android 13 versions prior to SMR Jun-2024 Release 1 Android 14 versions prior to SMR Jun-2024 Release 1 **Description** The issue is related to improper access control in the WindowManagerService, allowing local attackers to bypass restrictions on starting services from the background. This could potentially lead to unauthorized access and actions on the affected devices. **Recommendations** For Android 12 versions prior to SMR Sep-2024 Release 1, update to SMR Sep-2024 Release 1 or later to resolve the issue. For Android 13 versions prior to SMR Jun-2024 Release 1, update to SMR Jun-2024 Release 1 or later to resolve the issue. For Android 14 versions prior to SMR Jun-2024 Release 1, update to SMR Jun-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the WindowManagerService until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Runestone versions prior to 2.9.09.003 Runestone versions prior to 3.2.01.007 **Description** The issue is related to improper access control in the Runestone application, allowing local attackers to obtain device location information. **Recommendations** For versions prior to 2.9.09.003, update to version 2.9.09.003 or later to resolve the issue. For versions prior to 3.2.01.007, update to version 3.2.01.007 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SReminder versions prior to 8.2.01.13 **Description** The issue allows the insertion of sensitive information into logs, potentially enabling an attacker to access a device's IMEI. **Recommendations** For versions prior to 8.2.01.13, update to version 8.2.01.13 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Account versions prior to 13.5.0 **Description** The issue is related to an improper component protection vulnerability. This vulnerability allows attackers to perform unauthorized logout actions. **Recommendations** For versions prior to 13.5.0, update to version 13.5.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ShareLive versions prior to 13.2.03.5 **Description** The issue is related to an improper restriction of broadcasting Intent in ShareLive, which leaks the MAC address of the connected Bluetooth device. **Recommendations** For versions prior to 13.2.03.5, update to version 13.2.03.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Account versions prior to 13.5.01.3 **Description** The issue allows attackers to access content providers without permission due to an intent redirection vulnerability. **Recommendations** For versions prior to 13.5.01.3, update to version 13.5.01.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Find My Mobile versions prior to 7.2.25.14 **Description** The issue allows a local attacker to access the IMEI via log, resulting in exposure of sensitive information. **Recommendations** For versions prior to 7.2.25.14, update to version 7.2.25.14 or later to resolve the issue.