CVE-2026-21130: Input Validation

Q: Who is exposed to this issue?

Devices running Samsung Checkout before version 5.1.03.1 are affected. Exploitation requires local access to the device; the provided data does not indicate remote exploitation.

Q: What could an attacker do if they exploit it?

A local attacker could launch an arbitrary activity with Samsung Checkout privileges. The stated impact includes low confidentiality and integrity impact, with no availability impact.

Q: What should be updated?

Update Samsung Checkout to version 5.1.03.1 or later. The issue affects versions prior to 5.1.03.1.

Published Oct 12, 2026

Updated

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

Affected Software

1 affected component

Samsung Samsung Checkout<5.1.03.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Samsung Checkout to a version that resolves this vulnerability.
Fixed in 5.1.03.1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Devices running Samsung Checkout before version 5.1.03.1 are affected. Exploitation requires local access to the device; the provided data does not indicate remote exploitation.

What could an attacker do if they exploit it?