Improper Component Export in Samsung Auto

Publication date: 2026-06-05

Last updated on: 2026-06-30

Assigner: Samsung Mobile

Description

Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-05

Last Modified

2026-06-30

Generated

2026-07-17

AI Q&A

2026-06-05

EPSS Evaluated

2026-07-15

NVD

CVE-2026-21034

EUVD

EUVD-2026-34806

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	auto	to 3.1.2.61 (exc)
samsung	auto	to 3.2.0.38 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves improper export of Android application components in Samsung Auto versions prior to 3.1.2.61 on Android 15 and 3.2.0.38 on Android 16. It allows a local attacker to change the audio configuration of the device.

Impact Analysis

The vulnerability allows a local attacker to modify the audio configuration on affected Samsung Auto versions. This could lead to unauthorized changes in audio settings, potentially disrupting normal audio functionality or causing unexpected behavior in the system's audio output.

Hi! I’m here to help you understand CVE-2026-21034. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70