AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21112

Samsung Tips: improper input validation

Samsung

CVE-2026-21112 · Published Sep 9, 2026 · updated Sep 23, 2026

Medium5.1
No fix yet
Samsung advisory

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Samsung advisories

All Samsung
Medium 5.1Sep 9Samsung Cloud Assistant: local attacker could disable enhanced data protectionCVE-2026-21106no fix yetMedium 6.9Sep 9Samsung Notes: out-of-bounds writeCVE-2026-21107no fix yetMedium 6.9Sep 9Samsung Bixby Touch: information disclosureCVE-2026-21108no fix yetLow 2.1Sep 9Samsung Watch Plugin: improper access controlCVE-2026-21109no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21110no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21111no fix yet