CVE-2026-21058
Received Received - Intake

Improper Input Validation in Samsung Contacts

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Samsung Mobile

Description
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-21058
EUVD
EUVD-2026-55083

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung contacts *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper input validation issue in Samsung Contacts prior to the SMR Aug-2026 Release 1. It allows local attackers to delete files using Samsung Contacts' elevated privileges.

Impact Analysis

An attacker could exploit this to delete important files on your device by leveraging Samsung Contacts' permissions. This could lead to data loss or disruption of contact-related functionality.

Compliance Impact

The vulnerability allows local attackers to delete files with Samsung Contacts' privilege due to improper input validation. This could lead to unauthorized data deletion, potentially impacting data integrity and availability. However, the provided CVE details do not specify direct implications for GDPR or HIPAA compliance.

Mitigation Strategies

Update Samsung Contacts to the SMR Aug-2026 Release 1 or later to address the improper input validation issue that allows local attackers to delete files with elevated privileges.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21058. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart