CVE-2026-20977: 
NixOS vulnerability analysis and mitigation

CVE-2026-20977 is an improper access control vulnerability in the Emergency Sharing feature of Samsung Android devices, allowing local attackers to interrupt its functioning. It affects Samsung Android versions 14.0, 15.0, and 16.0 prior to the SMR Feb-2026 Release 1 security update. The vulnerability was published on February 4, 2026, with a patch released on February 5, 2026. It carries a CVSS v3.1 base score of 5.5 (Medium) and a CVSS v4.0 base score of 6.9 (Medium) (Samsung Security).

The vulnerability is classified as improper access control (CWE-284), residing in the Emergency Sharing component of Samsung's Android OS. A local attacker with low privileges can exploit insufficient access control enforcement to interfere with or interrupt the Emergency Sharing functionality. The attack vector is local, requires no user interaction, and has low attack complexity, making it straightforward to exploit for any user with local device access (Samsung Security). No public proof-of-concept code has been identified at this time.

Successful exploitation results in a high availability impact, specifically the denial of service of the Emergency Sharing feature on affected Samsung devices. This could prevent legitimate emergency operations — such as sharing location or device status during emergencies — from functioning correctly. There is no confidentiality or integrity impact; the vulnerability is limited to disrupting the availability of a critical safety feature (Samsung Security).

There is no evidence of active in-the-wild exploitation or publicly available proof-of-concept code for CVE-2026-20977. The EPSS score is approximately 0.005%, indicating a very low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Samsung Security).

Samsung has addressed this vulnerability in the SMR Feb-2026 Release 1 security update for Android versions 14.0, 15.0, and 16.0. Users and administrators should apply the February 2026 Samsung security update as soon as possible. As a general precaution, restricting physical and local access to devices and enforcing strong device access controls can reduce exposure until patching is complete (Samsung Security).