CVE-2026-21128

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Samsung Checkout

Publication date: 2026-10-12

Last updated on: 2026-10-15

Assigner: Samsung Mobile

Description

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-12

EPSS Evaluated

2026-10-18

NVD

CVE-2026-21128

EUVD

EUVD-2026-97192

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	checkout	5.1.03.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper input validation issue in Samsung Checkout's CreditCardRegisterActivity component. It allows local attackers to execute arbitrary activities with the privileges of Samsung Checkout before version 5.1.03.1.

Detection Guidance

This vulnerability involves improper input validation in Samsung Checkout's CreditCardRegisterActivity component. Detection requires checking the installed version of Samsung Checkout on affected devices. If the version is prior to 5.1.03.1, the system is vulnerable. No specific commands are provided in the context for detection.

Impact Analysis

An attacker could exploit this to perform unauthorized actions within Samsung Checkout, potentially accessing sensitive payment or user data stored in the app. This could lead to data theft or fraud if the attacker gains control of the app's functions.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations using affected versions may face compliance violations and potential penalties.

Mitigation Strategies

Update Samsung Checkout to version 5.1.03.1 or later to address the improper input validation issue in CreditCardRegisterActivity.

Hi! I’m here to help you understand CVE-2026-21128. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70