CVE-2026-21014
Improper Access Control in Samsung Camera Exposes Location Data
Publication date: 2026-04-13
Last updated on: 2026-04-16
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | camera | to 16.5.00.28 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Samsung Camera application to version 16.5.00.28 or later.
Since the vulnerability requires user interaction to be triggered, avoid interacting with untrusted prompts or requests within the camera app.
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in the Samsung Camera application prior to version 16.5.00.28. It allows a local attacker to access location data stored or managed by the camera app. However, the attacker must have some level of user interaction to trigger this vulnerability.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to location data by a local attacker. This could compromise your privacy by exposing sensitive location information that you may not want to be accessed by others.