CVE-2026-21130

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

Score

CVSS 4.0 5.1 Medium

Status

Awaiting Analysis - mobile.security@samsung.com

Published

2026-10-12

Last modified

2026-10-15

Weaknesses

CWE-20

Affected products

• Samsung Checkout (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=10