PT-2026-2055 · Qualcomm · Smr Jan-2026 Release 1

Published 2026-01-09 · Updated 2026-01-29 · CVE-2026-20974

Positive Technologies (AI Summary)

CVSS v4.0

5.2

Medium

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions versions prior to SMR Jan-2026 Release 1

Description Improper input validation in data related to network restrictions allows physical attackers to bypass Carrier Relock. This flaw could enable unauthorized access to device functionality.

Recommendations Update to SMR Jan-2026 Release 1 or later.

Fix

Related Identifiers

CVE-2026-20974

Affected Products

Smr Jan-2026 Release 1

References · 6

• https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20974 · Security Note
• https://osv.dev/vulnerability/CVE-2026-20974 · Vendor Advisory
• https://reddit.com/r/GalaxyS21/comments/1qqh2tt/s21_firmware_security_update_downloaded_in_usa · Reddit Post
• https://twitter.com/CVEnew/status/2009526580247220466 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2009580006444269576 · Twitter Post