Global readable private keys found in storage/emulated/0/data - Possible security risk? I found following global readable files in /storage/emulated/0/data/IMS:

cert.pem

private_key.pem

I have full access to this files with my file-manager/text-editor, so I think any other app will have full access too! It seems to be a privacy/security issue.

Information:

Cert.pem line 6: "Issuer: CN=Samsung RCS Client"

(Wikipedia: RCS="Rich Communication Services")
I moved private_key.pem to another directory, it has been replaced by a new different private_key.pem file.

Is this a possible security risk?
A globally-readable private key is almost certainly a vulnerability. A globally-readable certificate is generally not. You appear to have both, so you've very likely found a vulnerability.

Your next step would be to either report it to the vendor (probably Samsung) or find a security researcher who can investigate further.

According to a blog post, Samsung Mobile security issues can be sent to mobile.security@samsung.com. In theory, that email should be staffed by someone clueful about security (unlike first-tier customer support), so you should get a reasonable response. When contacting them, you should let them know about this question, so they realize it's already been disclosed.