SamsungCVE-2026-82926

Samsung mTower: null pointer dereference

Medium5.5CVE-2026-82926 · Published Sep 1, 2026

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.

Samsung advisory

Affected versions

Package	Affected	Fixed in
mTower Product	< afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a	afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-476

More Samsung advisories

All Samsung

Date	Advisory	Severity	Fixed in
Sep 7	Samsung Walrus: integer overflow Medium6.2Sep 7 CVE-2026-86314No fix yet	Medium6.2	No fix yet
Sep 4	Samsung rLottie: out-of-bounds read Medium4.4Sep 4 CVE-2026-49509No fix yet	Medium4.4	No fix yet
Sep 3	Samsung Open Source TizenFX Samsung/TizenFX: out-of-bounds write Medium6.3Sep 3 CVE-2026-85084No fix yet	Medium6.3	No fix yet
Sep 1	Samsung mTower: untrusted pointer dereference Medium5.5Sep 1 CVE-2026-10420102d3dc75cf8e58e68e4bea54ae3c803992c91be	Medium5.5	102d3dc75cf8e58e68e4bea54ae3c803992c91be
Sep 1	Samsung mTower: untrusted pointer dereference Medium5.5Sep 1 CVE-2026-8292706994e303637512e39062f3e037c222e8448e57e	Medium5.5	06994e303637512e39062f3e037c222e8448e57e
Aug 31	Samsung rlottie: uncontrolled recursion Medium5.5Aug 31 CVE-2026-827978de0d9e6ca80ffef654965505981727b9fa06a51	Medium5.5	8de0d9e6ca80ffef654965505981727b9fa06a51

Affected versions

More Samsung advisories

Critical advisories by email