CVE-2026-21130

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Samsung Checkout

Publication date: 2026-10-12

Last updated on: 2026-10-15

Assigner: Samsung Mobile

Description

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-12

EPSS Evaluated

2026-10-18

NVD

CVE-2026-21130

EUVD

EUVD-2026-97194

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	checkout	5.1.03.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper input validation issue in Samsung Checkout's CreditCardRetrieveActivity component. It allows local attackers to launch an arbitrary activity with elevated Samsung Checkout privileges due to insufficient input checks.

Detection Guidance

This vulnerability involves improper input validation in Samsung Checkout. Detection requires checking the installed version of Samsung Checkout and verifying if it is prior to 5.1.03.1. No specific commands are provided in the context to detect this issue.

Impact Analysis

An attacker could exploit this to execute unauthorized activities within Samsung Checkout, potentially accessing sensitive payment data or performing actions with the app's elevated permissions on your device.

Compliance Impact

The vulnerability allows local attackers to launch arbitrary activities with Samsung Checkout privileges due to improper input validation. This could potentially lead to unauthorized access or data exposure, which may impact compliance with standards like GDPR or HIPAA if sensitive data is involved. However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Update Samsung Checkout to version 5.1.03.1 or later to address the improper input validation issue in CreditCardRetrieveActivity.

Hi! I’m here to help you understand CVE-2026-21130. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70