CVE-2026-21128: Input Validation
Published Oct 12, 2026
·Updated
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
Affected Software
1 affected component
Samsung Samsung Checkout<5.1.03.1
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be local to the affected device. The available information does not describe a remote exploitation path.
2
What could successful exploitation allow?
A local attacker could launch an arbitrary activity with Samsung Checkout privileges.
3
Which installations are affected?
Samsung Checkout versions prior to 5.1.03.1 are affected. The provided information does not state whether the vulnerable condition is reachable in the default configuration.