CVE-2026-21157 Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary…

Description

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

Affected products and versions

Product	Affected versions	Fixed in
Bixby 4.0	earliest → < 4.0.85.6	4.0.85.6

Other CVEs of Bixby

The 4 CVEs of Bixby →

CVE-2026-21074 Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands… 7.2 High CVE-2026-21055 Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute… 8.5 High CVE-2021-25380 Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions… 5.8 Medium