SamsungCVE-2026-21104

Samsung: heap buffer overflow

CVE-2026-21104 · Published Sep 9, 2026 · updated Sep 11, 2026

High7.1

No fix yet

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Details and references

CVSS 4.0: CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-122