Samsung Camera <16.5.00.28 Improper Access Control Exposes Location Data
CVE-2026-21014 Published on April 13, 2026

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

NVD

Vulnerability Analysis

CVE-2026-21014 is exploitable with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
ACTIVE

Affected Versions

Samsung Mobile Samsung Camera:

Exploit Probability

EPSS
0.09%
Percentile
0.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.