Skip to main content

Samsung Tips CVE-2026-21112

| EUVDEUVD-2026-74653 MEDIUM
Improper Input Validation (CWE-20)
2026-09-09 SamsungMobile GHSA-wq5g-hxg8-8f9j
Information Disclosure Samsung Samsung Mobile Samsung Tips
5.1
CVSS 4.0 · Vendor: SamsungMobile
Share

Severity by source

Vendor (SamsungMobile) PRIMARY
5.1 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.0 MEDIUM

Local attack requiring low privileges and user interaction with high confidentiality but no integrity or availability impact, consistent with activity hijacking.

3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
4.0 AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (SamsungMobile).

CVSS VectorVendor: SamsungMobile

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
X

Lifecycle Timeline

2
Metadata Corrected
Sep 09, 2026 - 08:40 vuln.today
tag: Google removed
Analysis Generated
Sep 09, 2026 - 08:35 vuln.today

DescriptionCVE.org

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

AnalysisAI

Improper input validation in Samsung Tips prior to Android 17 allows a local, low-privileged attacker to launch arbitrary Android activities under Samsung Tips' privileges. The attack requires user interaction to trigger the flaw, limiting its severity, but successful exploitation grants the attacker access to functionality and data scoped to the Samsung Tips application. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires: (1) local access to a Samsung device running Samsung Tips prior to Android 17; (2) the attacker holds at minimum a standard low-privileged Android account (PR:L); (3) user interaction is required - the victim must perform some action within or triggering Samsung Tips (UI:P). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world risk is moderate and contextually bounded. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the Samsung security patch delivered as part of the Android 17 update cycle, which resolves this vulnerability in Samsung Tips. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Samsung Mobile

View all
CVE-2015-7896 MEDIUM POC
6.5 Aug 24

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memor
CVE-2026-21085 HIGH POC
8.4 Sep 09

Out-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
CVE-2015-7891 HIGH POC
7.0 Aug 02

Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A
CVE-2017-5538 CRITICAL
9.8 Mar 23

The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) an
CVE-2016-9967 CRITICAL
9.8 Dec 16

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5
CVE-2016-9966 CRITICAL
9.8 Dec 16

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5
CVE-2016-9965 CRITICAL
9.8 Dec 16

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5
CVE-2018-9143 CRITICAL
9.8 Mar 30

On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code
CVE-2018-9139 CRITICAL
9.8 Mar 30

On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privi
CVE-2015-7895 MEDIUM POC
5.5 Jun 27

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Rated medium s
CVE-2015-7898 MEDIUM POC
5.5 Jun 27

Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Rated medium s
CVE-2026-21102 CRITICAL
9.3 Sep 09

Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-21112 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy