CVE-2026-82926

Source
https://cve.org/CVERecord?id=CVE-2026-82926
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82926.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82926
Published
2026-09-01T10:21:04Z
Modified
2026-10-28T11:18:42Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.

This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.

Database specific
{
    "cna_assigner":  "samsung.tv_appliance",
    "cwe_ids":  [
        "CWE-476"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82926.json"
}
References

Affected packages

Git / github.com/samsung/mtower

Affected ranges

Type
GIT
Repo
https://github.com/samsung/mtower
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Database specific
Show details
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82926.json"
vanir_signatures
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "44225718791052206932855531126596243073",
                "93525357806616505471940280553651383695",
                "161660072184819759070418933852311450057"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-82926-43d7b752",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/samsung/mtower/commit/afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a",
        "target":  {
            "file":  "tee/kernel/tee_ta_manager.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "15241187977599390557027995090086717603",
                "44681165727113205849469617731580140998",
                "314630279340291159028378177108634450152"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-82926-5da1207b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/samsung/mtower/commit/afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a",
        "target":  {
            "file":  "tee/kernel/entry_std.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "55834891065023268035352653061700326694",
            "length":  189
        },
        "id":  "CVE-2026-82926-7549ea4b",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/samsung/mtower/commit/afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a",
        "target":  {
            "file":  "tee/kernel/tee_ta_manager.c",
            "function":  "tee_ta_invoke_command"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "211490072679911781159869967205244301637",
            "length":  495
        },
        "id":  "CVE-2026-82926-d3707a39",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/samsung/mtower/commit/afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a",
        "target":  {
            "file":  "tee/kernel/entry_std.c",
            "function":  "tee_ioctl_invoke"
        }
    }
]
vanir_signatures_modified
"2026-10-28T11:18:42Z"