Common Vulnerabilities and Exposures (CVE)

CVE-2026-21131

Oct 12, 2026 04:57:49 UTC

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.

CVE-2026-21130

Oct 12, 2026 04:57:47 UTC

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

CVE-2026-21129

Oct 12, 2026 04:57:46 UTC

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

CVE-2026-21128

Oct 12, 2026 04:57:45 UTC

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.

CVE-2026-21127

Oct 12, 2026 04:57:44 UTC

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.

CVE-2026-21126

Oct 12, 2026 04:57:42 UTC

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21125

Oct 12, 2026 04:57:41 UTC

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21124

Oct 12, 2026 04:57:40 UTC

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21123

Oct 12, 2026 04:57:39 UTC

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

CVE-2026-21122

Oct 12, 2026 04:57:38 UTC

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

CVE-2026-21121

Oct 12, 2026 04:57:37 UTC

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.

CVE-2026-21120

Oct 12, 2026 04:57:36 UTC

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

CVE-2026-21119

Oct 12, 2026 04:57:34 UTC

Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.

CVE-2026-21118

Oct 12, 2026 04:57:33 UTC

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.

CVE-2026-21117

Oct 12, 2026 04:57:32 UTC

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.

Page: 2