Improper Input Validation Vulnerability in Samsung Pass by Samsung
CVE-2026-21057

6.8MEDIUM

Key Information:

Vendor

Samsung

Vendor
CVE Published:
10 July 2026

What is CVE-2026-21057?

An improper input validation flaw in Samsung Pass prior to version 5.2.10.3 enables local privileged attackers to exploit out-of-bounds memory writing. This vulnerability could lead to potential unauthorized access to sensitive information or system compromise if exploited. It is crucial for users to update their software to secure versions to mitigate this risk.

Affected Version(s)

Samsung Pass 5.2.10.3

References

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.