CVE-2026-21116: Medium severity Samsung libsmkvextractor.so vulnerability
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SMR Oct-2026 Release 1
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires local access to a device or environment containing the affected Samsung libsmkvextractor.so component. No privileges or user interaction are required according to the CVSS vector.
What impact could successful exploitation have?
The reported impact is an out-of-bounds memory write, with low integrity and availability impact. The CVSS vector does not indicate confidentiality impact.
Which releases are affected?
The issue affects libsmkvextractor.so versions prior to SMR Oct-2026 Release 1. The provided information does not identify specific device models or earlier version numbers.