Improper Cryptographic Signature Verification in Samsung Mobile Fonts
CVE-2026-20989

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
16 March 2026

What is CVE-2026-20989?

The vulnerability involves inadequate verification processes for cryptographic signatures within the Font Settings of Samsung mobile devices. This oversight allows malicious actors with physical access to exploit the system by utilizing custom fonts, potentially compromising the integrity and security of the device.

Affected Version(s)

Samsung Mobile Devices SMR Mar-2026 Release in Android 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.