Improper Input Validation in Samsung Tips Affecting Android Devices
CVE-2026-21112

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Tips
Vendor
CVE Published:
9 September 2026

What is CVE-2026-21112?

An improper input validation vulnerability has been identified in Samsung Tips prior to Android 17, allowing local attackers to exploit this weakness. By leveraging this flaw, attackers can launch arbitrary activities with the privileges associated with Samsung Tips. User interaction is required to trigger this vulnerability, highlighting the need for vigilance and caution among users.

Affected Version(s)

Samsung Tips Android 17

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.