SamsungCVE-2026-21087
Samsung: out-of-bounds write
High8.6CVE-2026-21087 · Published Sep 9, 2026 · updated Sep 11, 2026
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-787
More Samsung advisories
All Samsung| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 9 | Samsung Cloud Assistant: local attacker could disable enhanced data protection | Medium5.1 | No fix yet |
| Sep 9 | Samsung Notes: out-of-bounds write | Medium6.9 | No fix yet |
| Sep 9 | Samsung Bixby Touch: information disclosure | Medium6.9 | No fix yet |
| Sep 9 | Samsung Watch Plugin: improper access control | Low2.1 | No fix yet |
| Sep 9 | Samsung: out-of-bounds write | Medium6.9 | No fix yet |
| Sep 9 | Samsung: out-of-bounds write | Medium6.9 | No fix yet |