Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
History

Fri, 10 Jul 2026 12:45:00 +0000

Type Values Removed Values Added
Title Out‑Of‑Bounds Memory Write in Samsung Pass via Improper Input Validation
Weaknesses CWE-120
CWE-787

Fri, 10 Jul 2026 12:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 10 Jul 2026 10:15:00 +0000

Type Values Removed Values Added
First Time appeared Samsung Mobile
Samsung Mobile samsung Pass
Vendors & Products Samsung Mobile
Samsung Mobile samsung Pass

Fri, 10 Jul 2026 05:15:00 +0000

Type Values Removed Values Added
Description Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
References
Metrics cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: SamsungMobile

Published: 2026-07-10T04:58:21.040Z

Updated: 2026-07-10T11:30:25.418Z

Reserved: 2025-12-11T01:33:35.821Z

Link: CVE-2026-21057

cve-icon Vulnrichment

Updated: 2026-07-10T11:30:19.464Z

cve-icon NVD

No data.

cve-icon Redhat

No data.