CVE-2026-21125
HighCVSS 8.6Summary
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
Risk Assessment
A local attacker could exploit the vulnerability to execute arbitrary code in the context of the application, potentially leading to privilege escalation or device compromise.
Recommendation
Install SMR Oct-2026 Release 1 or later.
Other vulnerabilities in libsimba.heifdec.media.samsung.so
See all- CVE-2026-21126Medium
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
- CVE-2026-21124High
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
Original NVD description (English source)
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS