CVE-2026-82926

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82926", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-08-31T11:53:16.413Z", "datePublished": "2026-09-01T10:21:04.912Z", "dateUpdated": "2026-09-21T12:03:49.901Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-21T12:03:49.901Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "mTower", "versions": [{"status": "affected", "version": "0", "lessThan": "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.<p>This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.</p>"}]}], "references": [{"url": "https://github.com/Samsung/mTower/pull/248"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}], "credits": [{"lang": "en", "value": "We would like to thank Tijs Bellefroid, Antonis Louka, Marton Bognar, and Jo Van Bulck from DistriNet, KU Leuven for reporting this vulnerability to the Samsung Product Security Incident Response Team (PSIRT).", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-01T12:18:43.514441Z", "id": "CVE-2026-82926", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-01T12:19:57.838Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-82926", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-01T12:18:43.514441Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-01T12:19:45.763Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "We would like to thank Tijs Bellefroid, Antonis Louka, Marton Bognar, and Jo Van Bulck from DistriNet, KU Leuven for reporting this vulnerability to the Samsung Product Security Incident Response Team (PSIRT)."}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "mTower", "versions": [{"status": "affected", "version": "0", "lessThan": "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a", "versionType": "git"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/Samsung/mTower/pull/248"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.", "supportingMedia": [{"type": "text/html", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.<p>This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference"}]}], "providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-21T12:03:49.901Z"}}}, "cveMetadata": {"cveId": "CVE-2026-82926", "state": "PUBLISHED", "dateUpdated": "2026-09-21T12:03:49.901Z", "dateReserved": "2026-08-31T11:53:16.413Z", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "datePublished": "2026-09-01T10:21:04.912Z", "assignerShortName": "samsung.tv_appliance"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "mTower", "vendor": "Samsung Open Source", "versions": [{"lessThan": "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a", "status": "affected", "version": "0", "versionType": "git"}]}], "source": "PSIRT@samsung.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a."}], "id": "CVE-2026-82926", "lastModified": "2026-09-01T20:50:58.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "PSIRT@samsung.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-82926", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-01T12:18:43.514441Z", "version": "2.0.3"}}]}, "published": "2026-09-01T11:16:45.243", "references": [{"source": "PSIRT@samsung.com", "url": "https://github.com/Samsung/mTower/pull/248"}], "sourceIdentifier": "PSIRT@samsung.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "PSIRT@samsung.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "mtower", "vendor": "samsung_open_source"}], "created": "2026-09-01T12:00:14.437607+00:00", "title": "Null Pointer Dereference Vulnerability in Samsung mTower", "updated": "2026-09-01T14:15:06.643468+00:00", "vendors": ["samsung_open_source", "samsung_open_source$PRODUCT$mtower"]}