CVE Catalog
CVE-2026-21066
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.16%
4th percentile - higher than 4% of all known CVEs
Summary
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Risk Assessment
A local attacker could cause out-of-bounds writes, potentially leading to crashes or system integrity compromise.
Recommendation
Install SMR Aug-2026 Release 1 or later to fix input validation in libcodec2_sec_flacdec.so.
Other vulnerabilities in libcodec2_sec_flacdec.so
Original NVD description (English source)
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS