CVE-2026-21157: Input Validation

Q: Who can exploit this issue?

Exploitation requires local access and privileged attacker permissions. The available information does not indicate that an unprivileged or remote attacker can exploit it.

Q: Which Bixby versions are affected?

Samsung Bixby versions earlier than 4.0.85.6 are affected. Version 4.0.85.6 or later is not identified as affected by this advisory.

Q: What is the potential impact of successful exploitation?

A privileged local attacker could launch arbitrary activities through improper input validation.

Published Oct 29, 2026

Updated

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

Affected Software

1 affected component

Samsung Bixby<4.0.85.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Bixby to a version that resolves this vulnerability.
Fixed in 4.0.85.6

Event History

Oct 29, 2026

CVE Published

via MITRE·01:01 AM

Data Sourced

via MITRE·01:01 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires local access and privileged attacker permissions. The available information does not indicate that an unprivileged or remote attacker can exploit it.

Which Bixby versions are affected?

Samsung Bixby versions earlier than 4.0.85.6 are affected. Version 4.0.85.6 or later is not identified as affected by this advisory.

What is the potential impact of successful exploitation?