CVE-2026-21126
MediumCVSS 6.9Summary
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
Risk Assessment
A local attacker can cause out-of-bounds memory write, potentially leading to system crash or potential code execution.
Recommendation
Apply SMR Oct-2026 Release 1 or later. Restrict local access to the device.
Other vulnerabilities in libsimba.heifdec.media.samsung.so
See all- CVE-2026-21125High
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
- CVE-2026-21124High
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
Original NVD description (English source)
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS