Untrusted Pointer Dereference Vulnerability in Samsung Open Source mTower
CVE-2026-82927

5.5MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Mtower
Vendor
CVE Published:
1 September 2026

What is CVE-2026-82927?

An untrusted pointer dereference vulnerability exists in the Samsung Open Source mTower, allowing for potential pointer manipulation. This issue impacts versions preceding the commit ID 06994e303637512e39062f3e037c222e8448e57e, posing risks that could be exploited if proper input validation measures are not in place. Users are advised to review the related patch and upgrade to the latest version to mitigate potential security threats.

Affected Version(s)

mTower 0 < 06994e303637512e39062f3e037c222e8448e57e

References

https://github.com/Samsung/mTower/pull/250

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.