CVE-2026-21120: Use After Free
Published Oct 12, 2026
·Updated
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
Affected Software
1 affected component
Samsung WSM service<SMR Oct-2026 Release 1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WSM serviceto a version that resolves this vulnerability.Patch SMR Oct-2026 Release 1
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local attacker access to a device running the affected Samsung WSM service. The issue may allow arbitrary code execution with system privilege.
2
What privileges could an attacker obtain?
A successful exploit could potentially execute arbitrary code with system privilege.
3
Which release addresses the issue?
The issue is described as affecting the WSM service prior to the SMR Oct-2026 Release 1 update.