CVE-2026-21114: High severity Samsung libsmkvextractor.so vulnerability

Q: Who is exposed to this issue?

Systems that include the affected Samsung libsmkvextractor.so before the SMR Oct-2026 Release 1 are exposed. The issue is locally exploitable, so an attacker needs local access to the affected system.

Q: What level of access does an attacker need?

The CVSS vector indicates no privileges and no user interaction are required, but the attacker must be local. Successful exploitation may allow arbitrary code execution.

Q: Which update addresses the vulnerability?

Samsung identifies SMR Oct-2026 Release 1 as the release after which libsmkvextractor.so is no longer affected. Update to that release or a later applicable Samsung security update.

Published Oct 12, 2026

Updated

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Affected Software

1 affected component

Samsung libsmkvextractor.so<SMR Oct-2026 Release 1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade libsmkvextractor.so to a version that resolves this vulnerability.
Patch SMR Oct-2026 Release 1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:16 AM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this issue?

Systems that include the affected Samsung libsmkvextractor.so before the SMR Oct-2026 Release 1 are exposed. The issue is locally exploitable, so an attacker needs local access to the affected system.

What level of access does an attacker need?

The CVSS vector indicates no privileges and no user interaction are required, but the attacker must be local. Successful exploitation may allow arbitrary code execution.

Which update addresses the vulnerability?

Samsung identifies SMR Oct-2026 Release 1 as the release after which libsmkvextractor.so is no longer affected. Update to that release or a later applicable Samsung security update.

CVE-2026-21114: High severity Samsung libsmkvextractor.so vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

Which update addresses the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

Which update addresses the vulnerability?