Samsung: Thirteen Vulnerabilities in Continuity, Flow, Checkout, and System Libraries Patched
Samsung disclosed thirteen vulnerabilities across its services and libraries on October 12, 2026, ranging from High to Low severity, patched in SMR Oct-2026 Release 1.
Key findings
- Thirteen vulnerabilities disclosed on October 12, 2026, affect Samsung Continuity, Flow, Checkout, and core system libraries.
- High-severity flaws include improper access control, out-of-bounds writes, and use-after-free vulnerabilities.
- Vulnerabilities in Samsung Checkout (CVE-2026-21130, CVE-2026-21129, CVE-2026-21128) allow arbitrary activity launches.
- Samsung Flow (CVE-2026-21134, CVE-2026-21131) and Continuity (CVE-2026-21139) also impacted by access and authentication issues.
- All issues patched in SMR Oct-2026 Release 1 or specific earlier versions.
On October 12, 2026, Samsung disclosed a batch of thirteen vulnerabilities affecting various Samsung applications and services, including Samsung Continuity Service, Samsung Flow, Samsung Checkout, and core system libraries. These vulnerabilities, ranging in severity from Low to High, were all patched in the SMR Oct-2026 Release 1 or earlier specific version updates. The disclosures highlight potential weaknesses in access control, authentication, and input validation across these services.
Several vulnerabilities stem from improper input validation within Samsung Checkout components. CVE-2026-21130, CVE-2026-21129, and CVE-2026-21128, all rated Medium, allow local attackers to launch arbitrary activities with Samsung Checkout privileges due to flaws in credit card registration and retrieval functionalities. These issues are fixed in Samsung Checkout version 5.1.03.1.
Samsung Flow is impacted by two vulnerabilities: CVE-2026-21134 (Medium) for improper authentication, allowing adjacent attackers to access sensitive information, and CVE-2026-21131 (Low) for incorrect default permissions, enabling local attackers to launch arbitrary activities with Samsung Flow privileges. Both are resolved in Samsung Flow version 4.9.22.4.
High-severity vulnerabilities include CVE-2026-21139, an improper access control issue in Samsung Continuity Service for Windows (prior to version 4.6.1217.0) that allows adjacent attackers to manipulate connected mobile devices. Also critical is CVE-2026-21122, an out-of-bounds write in libsamsungtts.so, potentially allowing local attackers to execute arbitrary code. Another High-severity flaw, CVE-2026-21120, is a use-after-free vulnerability in the WSM service, which could allow local attackers to execute arbitrary code with system privileges. These and other vulnerabilities impacting core system libraries like libsimba.heifdec.media.samsung.so (CVE-2026-21126), libsamsungtts.so (CVE-2026-21122), lib_sag_ai_sound_sep_v2.00.so (CVE-2026-21119), and libcodec2-sec-flacdec.so (CVE-2026-21115) were addressed in the SMR Oct-2026 Release 1.
Other notable vulnerabilities include CVE-2026-21121 (Medium), a flaw in CmcCore allowing local attackers to use privileged APIs, and CVE-2026-21118 (Medium), an improper access control issue in DownloadProvider that could allow local attackers to access files in scoped storage.
Users of Samsung devices are advised to ensure their systems are updated to the latest security patches, specifically the SMR Oct-2026 Release 1 or later, to mitigate these vulnerabilities. The batch of disclosures underscores the importance of regular security updates for maintaining the integrity and security of personal data handled by Samsung applications and services.
The patched versions include:
- Samsung Continuity Service for windows prior to version 4.6.1217.0
- Samsung Flow prior to version 4.9.22.4
- Samsung Checkout prior to version 5.1.03.1
- Various components fixed in SMR Oct-2026 Release 1.