Privileged code execution via unvalidated chnactiv input

Improper input validation in chnactiv TA on selected Samsung Android 12 and 13 devices allows local privileged attackers to execute arbitrary code. Samsung has not disclosed which input chnactiv TA accepts without proper validation or the operation performed on that input. Exploitation requires local access, high privileges, and a high-complexity trigger; successful exploitation runs attacker-controlled code.