CVE-2026-21087
EUVD-2026-7462809.09.2026, 05:17
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| samsung | android | 15.0 |
| samsung | android | 15.0:smr-apr-2025-r1 |
| samsung | android | 15.0:smr-apr-2026-r1 |
| samsung | android | 15.0:smr-aug-2025-r1 |
| samsung | android | 15.0:smr-aug-2026-r1 |
| samsung | android | 15.0:smr-dec-2025-r1 |
| samsung | android | 15.0:smr-feb-2025-r1 |
| samsung | android | 15.0:smr-feb-2026-r1 |
| samsung | android | 15.0:smr-jan-2025-r1 |
| samsung | android | 15.0:smr-jan-2026-r1 |
| samsung | android | 15.0:smr-jul-2025-r1 |
| samsung | android | 15.0:smr-jul-2026-r1 |
| samsung | android | 15.0:smr-jun-2025-r1 |
| samsung | android | 15.0:smr-jun-2026-r1 |
| samsung | android | 15.0:smr-mar-2025-r1 |
| samsung | android | 15.0:smr-mar-2026-r1 |
| samsung | android | 15.0:smr-may-2025-r1 |
| samsung | android | 15.0:smr-may-2026-r1 |
| samsung | android | 15.0:smr-nov-2025-r1 |
| samsung | android | 15.0:smr-oct-2025-r1 |
| samsung | android | 15.0:smr-sep-2025-r1 |
| samsung | android | 16.0 |
| samsung | android | 16.0:smr-apr-2026-r1 |
| samsung | android | 16.0:smr-aug-2025-r1 |
| samsung | android | 16.0:smr-aug-2026-r1 |
| samsung | android | 16.0:smr-dec-2025-r1 |
| samsung | android | 16.0:smr-feb-2026-r1 |
| samsung | android | 16.0:smr-jan-2026-r1 |
| samsung | android | 16.0:smr-jul-2026-r1 |
| samsung | android | 16.0:smr-jun-2026-r1 |
| samsung | android | 16.0:smr-mar-2026-r1 |
| samsung | android | 16.0:smr-may-2026-r1 |
| samsung | android | 16.0:smr-nov-2025-r1 |
| samsung | android | 16.0:smr-oct-2025-r1 |
| samsung | android | 16.0:smr-sep-2025-r1 |
| samsung | android | 17.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration