Skip to finding
important · Physical access

Physical access to a Galaxy phone can expose files with Android system privilege through GalaxyDiagnostics.

Affects

Samsung Galaxy mobile devices running Android 14 through 17 with the GalaxyDiagnostics system component.

Samsung confirms the path traversal and published a September fix, but does not identify the accessible file set or show that the path crosses locked-device credential encryption.

Detail and 1 source
Share this finding
Get it by email

The same brief, every morning. One email a day, nothing else.

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Tuesday, September 8, 2026