CVE-2026-21072
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Risk Assessment
A local attacker could cause an out-of-bounds write, potentially leading to system crash or arbitrary code execution.
Recommendation
Update the software to a version that includes the fix (SMR Aug-2026 Release 1 or later).
Other vulnerabilities in libsavsvc.so
See all- CVE-2026-21071High
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
- CVE-2026-21069High
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Original NVD description (English source)
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.