CVE Catalog
CVE-2026-21047
HighCVSS 8.3Exploitation Probability (EPSS)
Elevated risk0.67%
51th percentile - higher than 51% of all known CVEs
Summary
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.
Risk Assessment
A remote attacker can exploit this vulnerability to take control of the device by executing arbitrary code in the context of ImsService.
Recommendation
Install the SMR Jul-2026 Release 1 update or later, which fixes this vulnerability.
Other vulnerabilities in ImsService
Original NVD description (English source)
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS