Improper Input Validation in Samsung Checkout Affects User Security
CVE-2026-21129

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Checkout
Vendor
CVE Published:
12 October 2026

What is CVE-2026-21129?

An improper input validation flaw in the GuestCreditCardRegisterActivity of Samsung Checkout (prior to version 5.1.03.1) permits local attackers to exploit the system by launching arbitrary activities with the privileges of Samsung Checkout. This vulnerability poses significant security risks as it could allow unauthorized access to sensitive functions within the application.

Affected Version(s)

Samsung Checkout 5.1.03.1

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.