CVE-2026-21102: CWE-416 Use after free in Samsung Mobile Samsung Mobile Devices
Affects Samsung Mobile Samsung Mobile DevicesSource GCVE Database
Not known to be exploited · CVSS 9.3 Critical : patch Samsung Mobile Samsung Mobile Devices as a priority.
Data as of 10/24/2026, 17:08:25 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HWhat to do
AI-suggested
Since the vulnerability affects versions prior to SMR September 2026 Release 1, applying that release or later updates from Samsung Mobile is likely the intended remediation once available.
Description
CVE-2026-21102 is a critical use-after-free vulnerability in the DualDAR component of Samsung Mobile Devices prior to the SMR September 2026 Release 1. It allows local privileged attackers to execute arbitrary code with root privileges. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact. No specific affected versions or patch information is provided in the available data.
Impact
Successful exploitation allows a local privileged attacker to execute arbitrary code with root privileges, potentially leading to full device compromise. This could affect device confidentiality, integrity, and availability severely.