There is code execution exploit in Samsung SD/eMMC firmware which, among other things, will allow changing the CID