← All advisories

Medium severity5.5NVD Advisory· Published Mar 16, 2026· Updated Apr 7, 2026

CVE-2026-21002

CVE-2026-21002

Description

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Samsung Mobile/Galaxy Store2 versions
cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*range: <4.6.03.8
- (no CPE)range: <4.6.03.8

Patches

Vulnerability mechanics

References

1

security.samsungmobile.com/serviceWeb.smsbnvdVendor Advisory

News mentions

0

No linked articles in our index yet.