Skip to main content

Samsung Mobile Devices EUVDEUVD-2026-74635

| CVE-2026-21094 MEDIUM
Improper Input Validation (CWE-20)
2026-09-09 SamsungMobile GHSA-x2xp-m8p3-jxm8
Buffer Overflow Samsung Mobile Devices Samsung Mobile
6.1
CVSS 4.0 · Vendor: SamsungMobile
Share

Severity by source

Vendor (SamsungMobile) PRIMARY
6.1 MEDIUM
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.4 MEDIUM

Adjacent network vector with high complexity and specific preconditions; no authentication required; high confidentiality impact from potential credential/key exposure, low integrity and availability impact.

3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
4.0 AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (SamsungMobile).

CVSS VectorVendor: SamsungMobile

Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Sep 09, 2026 - 08:41 vuln.today
CVE Published
Sep 09, 2026 - 04:47 cve.org
MEDIUM 6.1

DescriptionCVE.org

Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.

AnalysisAI

Out-of-bounds memory write in wpa_supplicant on Samsung Mobile Devices (Android 14 through 17) enables an adjacent unauthenticated attacker to corrupt process memory, with the CVSS 4.0 vector confirming potential high-confidentiality impact - likely exposure of Wi-Fi credentials or session keying material held in the wpa_supplicant process. Samsung resolved this in the SMR Sep-2026 Release 1 patch for all four affected Android generations. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires physical or logical adjacency to the target device's Wi-Fi interface - the attacker must be within Wi-Fi broadcast range and able to transmit frames to the target (AV:A); internet-based remote exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.1 (Medium) accurately reflects meaningful but structurally constrained risk: the adjacent attack vector (AV:A) confines exploitation to attackers within Wi-Fi broadcast range, while high complexity (AC:H) and the AT:P precondition flag further narrow the window - this is not spray-and-pray territory. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply Samsung's SMR Sep-2026 Release 1 patch, which addresses this vulnerability across Android 14, 15, 16, and 17. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Samsung Mobile Devices

View all
CVE-2026-21085 HIGH POC
8.4 Sep 09

Out-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
CVE-2026-21102 CRITICAL
9.3 Sep 09

Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile

CVE-2026-21096 CRITICAL
9.2 Sep 09

Remote code execution in Samsung Mobile Devices arises from a heap-based buffer overflow in the JPEG decoding path of li
CVE-2026-21095 CRITICAL
9.2 Sep 09

Remote code execution in the DNG (Adobe Digital Negative) image decoder within Samsung's Quram imaging library (libimage
CVE-2026-21092 HIGH
8.8 Sep 09

Path traversal in Samsung's ImsService (IP Multimedia Subsystem Service) on Android 14 through 17 permits remote unauthe
CVE-2026-21087 HIGH
8.6 Sep 09

Out-of-bounds write in libmdnie.so on Samsung Mobile Devices running Android 15, 16, and 17 enables local attackers to e
CVE-2026-21019 HIGH
8.6 May 13

Local privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
CVE-2026-21068 HIGH
8.4 Aug 10

Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
CVE-2026-21101 HIGH
8.4 Sep 09

Improper input validation in Samsung's DualDAR kernel driver enables a local privileged attacker to escalate privileges

CVE-2026-21047 HIGH
8.3 Jul 28

Memory corruption in Samsung's proprietary ImsService - the IP Multimedia Subsystem component handling VoLTE, Wi-Fi Call
CVE-2026-20990 HIGH
8.1 Mar 16

Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
CVE-2026-21104 HIGH
7.1 Sep 09

Heap buffer overflow in Samsung KnoxVault trustlet (hwvault trusted application) on Samsung Mobile Devices prior to SMR

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

EUVD-2026-74635 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy