CVE-2026-21003

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21003", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "SamsungMobile", "dateReserved": "2025-12-11T01:33:35.802Z", "datePublished": "2026-04-13T04:57:14.913Z", "dateUpdated": "2026-04-13T18:06:17.002Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20: Improper Input Validation"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Apr-2026 Release in Selected Android 14, 15, 16 devices", "versionType": "semver", "lessThan": "*"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions."}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 5.2, "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "baseSeverity": "MEDIUM"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "SamsungMobile", "dateUpdated": "2026-04-13T04:57:14.913Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21003", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-13T17:35:17.143219Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T18:06:17.002Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21003", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-13T17:35:17.143219Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T17:57:41.533Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 5.2, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Apr-2026 Release in Selected Android 14, 15, 16 devices", "lessThan": "*", "versionType": "semver"}], "defaultStatus": "affected"}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "descriptions": [{"lang": "en", "value": "Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20: Improper Input Validation"}]}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "SamsungMobile", "dateUpdated": "2026-04-13T04:57:14.913Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21003", "state": "PUBLISHED", "dateUpdated": "2026-04-13T18:06:17.002Z", "dateReserved": "2025-12-11T01:33:35.802Z", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "datePublished": "2026-04-13T04:57:14.913Z", "assignerShortName": "SamsungMobile"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "Samsung Mobile Devices", "vendor": "Samsung Mobile", "versions": [{"lessThan": "*", "status": "unaffected", "version": "SMR Apr-2026 Release in Selected Android 14, 15, 16 devices", "versionType": "semver"}]}], "source": "mobile.security@samsung.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "00EE2529-013A-4F73-8D86-BD1AD613028D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "344C7BB6-F50A-4548-B95B-3B39DB125AA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "65D075F0-98F7-44ED-B53A-CDD7B7994196", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "8FBFBC5D-9716-4F07-A9E6-D843AFA06871", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "DCC507C7-FB2C-4B74-B1AD-48F939D9C079", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AAFE22F0-4B77-4034-8271-34A131B14D85", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "B1E0CF77-4D2C-4BA6-88ED-887DD1984763", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F878069B-37C9-4636-8C31-526B610A0AFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "03A54EA0-3B86-4236-AA3C-840ACCD174A8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "1E516E0C-5A39-4657-93F7-16CCA42FA0E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F9B1BCF7-069A-42BC-A654-5C894C92CF1A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "65F036A0-874D-4607-833E-167753748DEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "98C26CF8-228F-4791-B5A3-B65DF709F402", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "2BB01FDF-5022-4EAE-9779-F09771BEC443", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "C1BA43B7-5D88-4F5E-B90C-5AE8AC422214", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "0C527C12-5480-4604-A480-1E540095EB5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions."}, {"lang": "es", "value": "Validaci\u00f3n de entrada incorrecta en datos relacionados con restricciones de red anterior a la versi\u00f3n 1 de SMR de abril de 2026 permite a atacantes f\u00edsicos eludir las restricciones."}], "id": "CVE-2026-21003", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.2, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "mobile.security@samsung.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21003", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-13T17:35:17.143219Z", "version": "2.0.3"}}]}, "published": "2026-04-13T05:16:02.230", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,SMR Apr-2026 Release in Selected Android 14, 15, 16 devices]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Samsung Mobile Devices", "source": "cna", "vendor": "Samsung Mobile"}, "product": "mobile_devices", "vendor": "samsung"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,SMR Apr-2026 Release in Selected Android 14, 15, 16 devices]"}}], "original": {"product": "Samsung Mobile Devices", "source": "cna", "vendor": "Samsung Mobile"}, "product": "samsung_mobile_devices", "vendor": "samsung_mobile"}], "analysis": {"en": {"generated_at": "2026-04-17T11:27:31.400053+00:00", "value": {"mitigation_remediation": ["Apply the SMR Apr\u20112026 Release\u202f1 Samsung security update to address the input validation flaw", "If the update cannot be applied immediately, enforce strict physical access controls such as secure storage, device lockouts, and biometric authentication to reduce the risk of a physical attacker altering network restrictions", "Additionally, disable removable media access or restrict user permissions on the device\u2019s network configuration files to prevent unauthorized modification"], "summary": {"action": "Update Device", "impact": "Network restriction bypass via physical attack"}, "threat_synthesis": {"affected_systems": "All Samsung Mobile Device firmware versions released prior to the SMR Apr\u20112026 Release\u202f1 update are affected. No specific build numbers are listed, so the issue is presumed to exist across the entire spectrum of devices shipped before the mentioned update.", "description_and_impact": "Improper input validation in the data controlling network restrictions on Samsung Mobile Devices before the SMR Apr\u20112026 Release\u202f1 update allows a physically present attacker to manipulate restriction settings. By altering this data, the device can be coerced into permitting network communication that should be disallowed, which could expose the device to unauthorized data transmission or further local compromise. The vulnerability represents a breach of confidentiality and integrity but does not enable remote code execution or broader system compromise.", "risk_and_exploitability": "The CVSS score of 5.2 indicates moderate risk. The EPSS score is 0.00044 (less than 1%), indicating a very low probability of exploitation. KEV does not list it, further suggesting limited exploitation. Exploitation requires physical possession of the device and the ability to modify the network restriction configuration; thus, attackers without direct device access cannot exploit the flaw. The attack vector is local and exploits improper input validation rather than remote vulnerabilities."}}}}, "created": "2026-04-13T12:37:15.247018+00:00", "updated": "2026-04-17T11:30:16.995204+00:00", "vendors": ["samsung", "samsung$PRODUCT$mobile_devices", "samsung_mobile", "samsung_mobile$PRODUCT$samsung_mobile_devices"]}