CVE-2026-10420

MediumCVSS 5.5

Published: 01/09/2026(UTC)Updated: 01/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Summary

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower before commit 102d3dc75cf8e58e68e4bea54ae3c803992c91be.

Risk Assessment

Pointer manipulation can lead to arbitrary code execution, memory corruption, or system crash, potentially compromising device security.

Recommendation

Update mTower to a version containing the fix (commit 102d3dc75cf8e58e68e4bea54ae3c803992c91be or later) and conduct security testing.

Other vulnerabilities in mTower

See all

CVE-2026-82927Medium
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower before 06994e303637512e39062f3e037c222e8448e57e.
CVE-2026-82926Medium
NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.

Original NVD description (English source)

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.