CVE-2026-21129: Input Validation
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Checkoutto a version that resolves this vulnerability.Fixed in 5.1.03.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access to the affected device. The advisory does not indicate that user interaction, authentication, or network access is required.
What could successful exploitation allow?
A local attacker could launch an arbitrary activity with Samsung Checkout privileges. The stated impact includes loss of confidentiality and integrity, with no availability impact listed.
Which versions need remediation?
Samsung Checkout versions prior to 5.1.03.1 are affected. Updating to version 5.1.03.1 or later addresses the affected version range described.