CVE Catalog

CVE-2026-21116

MediumCVSS 5.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

Risk Assessment

A local attacker could cause memory corruption, potentially leading to system crashes or unauthorized privilege escalation.

Recommendation

Install the SMR Oct-2026 Release 1 update that eliminates the out-of-bounds write vulnerability.

Other vulnerabilities in libsmkvextractor.so

Original NVD description (English source)

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS