What is CVE-2026-21014?

CVE-2026-21014 is a low-severity vulnerability in Samsung Camera, classified under CWE-284: IMPROPER ACCESS CONTROL. CVSS score: 2.8/10. Published 2026-04-13.

How severe is CVE-2026-21014?

Low severity. CVSS v3 base score is 2.8 out of 10.

Is CVE-2026-21014 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Samsung Camera

CVE-2026-21014

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.

EPSS: 0.001 (0.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Samsung Camera
Samsung Mobile Camera — versions 16.5.00.28

Public proof-of-concept exploits

George0Papasotiriou/CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-21014?: CVE-2026-21014 is a low-severity vulnerability in Samsung Camera, classified under CWE-284: IMPROPER ACCESS CONTROL. CVSS score: 2.8/10. Published 2026-04-13.
How severe is CVE-2026-21014?: Low severity. CVSS v3 base score is 2.8 out of 10.
Is CVE-2026-21014 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.