SamsungCVE-2026-21087

Samsung: out-of-bounds write

CVE-2026-21087 · Published Sep 9, 2026 · updated Sep 11, 2026

High8.6

No fix yet

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Details and references

CVSS 4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-787