CVE-2026-21019

Description

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.

References

• https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=05