CVE-2026-21014

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data

Medium · published April 13, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00085 · 0.3th percentile
Published
2026-04-13T05:04Z
EPSS history
Timeline
  • 13 APR 05:04Z
    Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data
    cvelistv5