CVE Catalog
CVE-2026-21070
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
Risk Assessment
An attacker with physical access to the device may obtain confidential data from the messaging app, posing a threat to user privacy.
Recommendation
Install the latest Samsung security update SMR Aug-2026 Release 1 or later to remediate the vulnerability.
Original NVD description (English source)
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.