Description
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Pass | — | — |
Medium · 6.8
CVE-2026-21057
EUVD-2026-42827GHSA-f2f7-m9f4-p7f9
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
Published Jul 10, 2026 · Updated Jul 10, 2026 · Assigned by SamsungMobile