CVE Catalog

CVE-2026-21114

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Risk Assessment

A local attacker could exploit the vulnerability to execute arbitrary code, potentially leading to privilege escalation or device compromise.

Recommendation

Install SMR Oct-2026 Release 1 or later.

Other vulnerabilities in libsmkvextractor.so

Original NVD description (English source)

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS