Improper Input Validation in Samsung Message Affects Samsung Devices
CVE-2026-21070

5.1MEDIUM

Key Information:

Vendor

Samsung

Vendor
CVE Published:
10 August 2026

What is CVE-2026-21070?

A vulnerability in Samsung Message allows physical attackers to exploit improper input validation, potentially gaining unauthorized access to sensitive user information. Users of affected devices prior to SMR Aug-2026 Release 1 are at risk of data exposure through malicious techniques. It is critical for users to ensure their devices are updated to the latest security releases to mitigate these risks.

Affected Version(s)

Samsung Mobile Devices SMR Aug-2026 Release in Android 14, 15

References

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.