Android Collection Improper Access Control <1.0.1.14 (15) / 2.0.02.7 (16)
CVE-2026-21105 Published on September 9, 2026

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.

NVD

Vulnerability Analysis

CVE-2026-21105 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-21105 has been classified to as an Authorization vulnerability or weakness.


Affected Versions

Samsung Mobile Collection: