CVE-2026-21128: Input Validation

Q: What level of access does an attacker need to exploit this issue?

The attacker must be local to the affected device. The available information does not describe a remote exploitation path.

Q: What could successful exploitation allow?

A local attacker could launch an arbitrary activity with Samsung Checkout privileges.

Q: Which installations are affected?

Samsung Checkout versions prior to 5.1.03.1 are affected. The provided information does not state whether the vulnerable condition is reachable in the default configuration.

Published Oct 12, 2026

Updated

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.

Affected Software

1 affected component

Samsung Samsung Checkout<5.1.03.1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be local to the affected device. The available information does not describe a remote exploitation path.

What could successful exploitation allow?

A local attacker could launch an arbitrary activity with Samsung Checkout privileges.

Which installations are affected?

Samsung Checkout versions prior to 5.1.03.1 are affected. The provided information does not state whether the vulnerable condition is reachable in the default configuration.

CVE-2026-21128: Input Validation

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Which installations are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Which installations are affected?