Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-20980

Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SamsungMobile

Description

Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Mobile Devices

Default version status: affected

  • SMR Feb-2026 Release in Android 14, 15, 16unaffected

References