Samsung SMR Access Control Error Vulnerability (CNVD-2022-63645)

Samsung SMR is a system patch package from South Korea’s Samsung (Samsung). It provides patches for Samsung mobile applications.Samsung SMR suffers from an access control error vulnerability, which stems from incorrect access control and path traversal in StroageManager and StroageManagerService. A local attacker could exploit the vulnerability to access arbitrary system files without proper privileges.