AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21096

Samsung: heap buffer overflow

Samsung

CVE-2026-21096 · Published Sep 9, 2026 · updated Sep 11, 2026

Critical9.2
No fix yet
Samsung advisory

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122

More Samsung advisories

All Samsung
Medium 5.1Sep 9Samsung Cloud Assistant: local attacker could disable enhanced data protectionCVE-2026-21106no fix yetMedium 6.9Sep 9Samsung Notes: out-of-bounds writeCVE-2026-21107no fix yetMedium 6.9Sep 9Samsung Bixby Touch: information disclosureCVE-2026-21108no fix yetLow 2.1Sep 9Samsung Watch Plugin: improper access controlCVE-2026-21109no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21110no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21111no fix yet