Samsung Visual Voicemail <20.1.00.05: Improper Export (Local Call)
CVE-2026-21113 Published on September 9, 2026
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
Vulnerability Analysis
CVE-2026-21113 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
Products Associated with CVE-2026-21113
Want to know whenever a new CVE is published for Samsung Email? stack.watch will email you.
Affected Versions
Samsung Mobile Visual Voicemail:- Version 20.1.00.05 and below * is unaffected.