{"id":"CVE-2026-82927","state":"PUBLISHED","title":"Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.","description":"Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e.","publishedAt":"2026-09-01T10:42:24.285Z","updatedAt":"2026-09-21T12:03:58.730Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","source":"samsung.tv_appliance"},"assigner":"samsung.tv_appliance","products":["Samsung Open Source mTower"],"affected":[{"vendor":"Samsung Open Source","product":"mTower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"06994e303637512e39062f3e037c222e8448e57e","versionType":"git"}]}],"references":["https://github.com/Samsung/mTower/pull/250"],"weaknesses":["CWE-822"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82927.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82927","state":"PUBLISHED","datePublished":"2026-09-01T10:42:24.285Z","dateUpdated":"2026-09-21T12:03:58.730Z","assignerShortName":"samsung.tv_appliance","assignerOrgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateReserved":"2026-08-31T11:53:17.414Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.\n\nThis issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e."}],"affected":[{"vendor":"Samsung Open Source","product":"mTower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"06994e303637512e39062f3e037c222e8448e57e","versionType":"git"}]}],"references":[{"url":"https://github.com/Samsung/mTower/pull/250"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-822","lang":"en","description":"CWE-822 Untrusted pointer dereference","type":"CWE"}]}],"providerMetadata":{"shortName":"samsung.tv_appliance","orgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateUpdated":"2026-09-21T12:03:58.730Z"},"impacts":[{"capecId":"CAPEC-129","descriptions":[{"lang":"en","value":"CAPEC-129 Pointer Manipulation"}]}],"credits":[{"lang":"en","value":"We would like to thank Tijs Bellefroid, Antonis Louka, Marton Bognar, and Jo Van Bulck from DistriNet, KU Leuven for reporting this vulnerability to the Samsung Product Security Incident Response Team  (PSIRT).","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T12:18:11.507844Z","id":"CVE-2026-82927","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T12:18:27.300Z"}}]}}}