{"id":"CVE-2026-82926","state":"PUBLISHED","title":"NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.","description":"NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.","publishedAt":"2026-09-01T10:21:04.912Z","updatedAt":"2026-09-21T12:03:49.901Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","source":"samsung.tv_appliance"},"assigner":"samsung.tv_appliance","products":["Samsung Open Source mTower"],"affected":[{"vendor":"Samsung Open Source","product":"mTower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a","versionType":"git"}]}],"references":["https://github.com/Samsung/mTower/pull/248"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82926.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82926","state":"PUBLISHED","datePublished":"2026-09-01T10:21:04.912Z","dateUpdated":"2026-09-21T12:03:49.901Z","assignerShortName":"samsung.tv_appliance","assignerOrgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateReserved":"2026-08-31T11:53:16.413Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a."}],"affected":[{"vendor":"Samsung Open Source","product":"mTower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a","versionType":"git"}]}],"references":[{"url":"https://github.com/Samsung/mTower/pull/248"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","lang":"en","description":"CWE-476 NULL pointer dereference","type":"CWE"}]}],"providerMetadata":{"shortName":"samsung.tv_appliance","orgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateUpdated":"2026-09-21T12:03:49.901Z"},"impacts":[{"capecId":"CAPEC-129","descriptions":[{"lang":"en","value":"CAPEC-129 Pointer Manipulation"}]}],"credits":[{"lang":"en","value":"We would like to thank Tijs Bellefroid, Antonis Louka, Marton Bognar,  and Jo Van Bulck from DistriNet, KU Leuven for reporting this  vulnerability to the Samsung Product Security Incident Response Team  (PSIRT).","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T12:18:43.514441Z","id":"CVE-2026-82926","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T12:19:57.838Z"}}]}}}