Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability.
https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=5