CVE-2026-82926 - Vulnerability Details - OpenCVE

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.

This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Samsung Open Source Subscribe	Mtower Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Samsung Open Source Subscribe	Mtower Subscribe

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://github.com/Samsung/mTower/pull/248

History

Tue, 01 Sep 2026 14:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Samsung Open Source Samsung Open Source mtower
Vendors & Products		Samsung Open Source Samsung Open Source mtower

Tue, 01 Sep 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 01 Sep 2026 12:15:00 +0000

Type	Values Removed	Values Added
Title		Null Pointer Dereference Vulnerability in Samsung mTower

Tue, 01 Sep 2026 10:30:00 +0000

Type	Values Removed	Values Added
Description		NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.
Weaknesses		CWE-476
References		https://github.com/Samsung/mTower/pull/248
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: samsung.tv_appliance

Published: 2026-09-01T10:21:04.912Z

Updated: 2026-09-01T12:19:57.838Z

Reserved: 2026-08-31T11:53:16.413Z

Link: CVE-2026-82926

Vulnrichment

Updated: 2026-09-01T12:19:45.763Z

NVD

Status : Deferred

Published: 2026-09-01T11:16:45.243

Modified: 2026-09-01T20:50:58.753

Link: CVE-2026-82926

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-01T14:15:06Z

Weaknesses

CWE-476

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82926", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-08-31T11:53:16.413Z", "datePublished": "2026-09-01T10:21:04.912Z", "dateUpdated": "2026-09-01T12:19:57.838Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-01T10:21:04.912Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "mTower", "versions": [{"status": "affected", "version": "0", "lessThan": "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.<p>This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.</p>"}]}], "references": [{"url": "https://github.com/Samsung/mTower/pull/248"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-01T12:18:43.514441Z", "id": "CVE-2026-82926", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-01T12:19:57.838Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82926", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-08-31T11:53:16.413Z", "datePublished": "2026-09-01T10:21:04.912Z", "dateUpdated": "2026-09-01T12:19:57.838Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-01T10:21:04.912Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC-129 Pointer Manipulation"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "mTower", "versions": [{"status": "affected", "version": "0", "lessThan": "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.<p>This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.</p>"}]}], "references": [{"url": "https://github.com/Samsung/mTower/pull/248"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-82926", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-01T12:18:43.514441Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-01T12:19:45.763Z"}}]}}