Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Referenceshttps://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=10