Insufficient Permissions in Galaxy Wearable for Non-Samsung Devices
CVE-2026-20984

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Galaxy Wearable
Vendor
CVE Published:
4 February 2026

What is CVE-2026-20984?

The Galaxy Wearable software, when installed on non-Samsung devices and prior to version 2.2.68, has a vulnerability stemming from improper handling of insufficient permissions. This flaw permits local attackers to exploit the system, potentially gaining unauthorized access to sensitive information stored within the app. Users with non-Samsung devices should update to the latest version to safeguard against these risks.

Affected Version(s)

Galaxy Wearable 2.2.68

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.