Samsung has announced its August 2026 Security Maintenance Release (SMR), which addresses 56 vulnerabilities across its Android and One UI platforms. The update is expected to begin rolling out to eligible Galaxy devices in the upcoming weeks.
Read More
This month's security patch resolves 38 vulnerabilities in Android, including eight classified as critical and 30 as high severity. Additionally, it includes fixes for 18 Samsung Vulnerabilities and Exposures (SVEs).
Key fixes in the update include a vulnerability in Weaver that could render devices unusable if exploited by local attackers. An issue in Galaxy Themes has also been addressed, which could allow physical attackers to initiate arbitrary activities on a device.
The update contains several important fixes for Samsung Contacts, which could allow attackers to delete files and access data across different user profiles through Contacts privileges. A vulnerability in Samsung Dialer that could permit unauthorized access to SIM-related functions has also been fixed.
Moreover, the security patch enhances the protection of media-related components, such as VC1 and MPEG4 codec libraries, which were susceptible to out-of-bounds memory writes. Improvements have also been made to Samsung Messages to prevent physical attackers from accessing sensitive information.
Samsung has addressed vulnerabilities in SemClipboardService, which could have allowed local attackers to access clipboard data, and fixed an App Lock vulnerability that may have enabled physical attackers to bypass app protection. The update also reinforces validation checks for several system libraries.
Users can check for the update manually by navigating to Settings > Software Update > Download and Install. Samsung will announce the rollout of the August 2026 security package as it begins.