CVE-2026-21108

Analyzed Analyzed - Analysis Complete

Improper Component Export in Bixby Touch

Publication date: 2026-09-09

Last updated on: 2026-09-23

Assigner: Samsung Mobile

Description

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-23

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-21108

EUVD

EUVD-2026-74649

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	bixby	to 4.3.01.17 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-926	The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper export of Android application components in Bixby Touch versions before 4.3.01.17. It allows local attackers to access sensitive information due to incorrect configuration of exported components.

Detection Guidance

This vulnerability involves improper export of Android application components in Bixby Touch. Detection requires checking the app's exported components and permissions. Use Android Debug Bridge (ADB) commands like 'adb shell dumpsys package com.samsung.bixby_touch' to inspect exported components. Verify if components are unintentionally exported and review their permissions.

Impact Analysis

Local attackers could exploit this to access sensitive data stored or processed by the Bixby Touch application. This may include personal information, credentials, or other confidential data depending on the app's functionality.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations using affected versions may face compliance violations and legal consequences.

Mitigation Strategies

Update Bixby Touch to version 4.3.01.17 or later to address the improper export of application components.

Hi! I’m here to help you understand CVE-2026-21108. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70