CVE-2026-21128
MediumCVSS 5.1Summary
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
Risk Assessment
A local attacker can leverage app privileges for unauthorized actions, potentially leading to data or functionality compromise.
Recommendation
Update Samsung Checkout to version 5.1.03.1 or later. Restrict local access to the device.
Other vulnerabilities in Samsung Checkout
See all- CVE-2026-21130Medium
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
- CVE-2026-21129Medium
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
Original NVD description (English source)
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS