CVE-2026-21014

Published: Apr 13, 2026Modified: Jun 17, 2026

5.1

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: mobile.security@samsung.com (Secondary)

Description

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

Affected (1)

Products: Samsung: Camera

Samsung

1 product

Camera

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung Camera	Before 16.5.00.28

References (1)

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=04

Source: mobile.security@samsung.com

Vendor Advisory

Timeline

No history available yet.