CVE-2026-21130: Input Validation

Q: Who is exposed to this issue?

Devices running Samsung Checkout before version 5.1.03.1 are affected. Exploitation requires local access to the device; the provided data does not indicate remote exploitation.

Q: What could an attacker do if they exploit it?

A local attacker could launch an arbitrary activity with Samsung Checkout privileges. The stated impact includes low confidentiality and integrity impact, with no availability impact.

Q: What should be updated?

Update Samsung Checkout to version 5.1.03.1 or later. The issue affects versions prior to 5.1.03.1.

Published Oct 12, 2026

Updated

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

Affected Software

1 affected component

Samsung Samsung Checkout<5.1.03.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Samsung Checkout to a version that resolves this vulnerability.
Fixed in 5.1.03.1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this issue?

Devices running Samsung Checkout before version 5.1.03.1 are affected. Exploitation requires local access to the device; the provided data does not indicate remote exploitation.

What could an attacker do if they exploit it?

A local attacker could launch an arbitrary activity with Samsung Checkout privileges. The stated impact includes low confidentiality and integrity impact, with no availability impact.

What should be updated?

Update Samsung Checkout to version 5.1.03.1 or later. The issue affects versions prior to 5.1.03.1.

CVE-2026-21130: Input Validation

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What could an attacker do if they exploit it?

What should be updated?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What could an attacker do if they exploit it?

What should be updated?