CVE-2026-21104 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.7 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 0.85%

Affected Products (NVD)

Vendor	Product	Version
samsung	android	15.0
samsung	android	15.0:smr-apr-2025-r1
samsung	android	15.0:smr-apr-2026-r1
samsung	android	15.0:smr-aug-2025-r1
samsung	android	15.0:smr-aug-2026-r1
samsung	android	15.0:smr-dec-2025-r1
samsung	android	15.0:smr-feb-2025-r1
samsung	android	15.0:smr-feb-2026-r1
samsung	android	15.0:smr-jan-2025-r1
samsung	android	15.0:smr-jan-2026-r1
samsung	android	15.0:smr-jul-2025-r1
samsung	android	15.0:smr-jul-2026-r1
samsung	android	15.0:smr-jun-2025-r1
samsung	android	15.0:smr-jun-2026-r1
samsung	android	15.0:smr-mar-2025-r1
samsung	android	15.0:smr-mar-2026-r1
samsung	android	15.0:smr-may-2025-r1
samsung	android	15.0:smr-may-2026-r1
samsung	android	15.0:smr-nov-2025-r1
samsung	android	15.0:smr-oct-2025-r1
samsung	android	15.0:smr-sep-2025-r1
samsung	android	16.0
samsung	android	16.0:smr-apr-2026-r1
samsung	android	16.0:smr-aug-2025-r1
samsung	android	16.0:smr-aug-2026-r1
samsung	android	16.0:smr-dec-2025-r1
samsung	android	16.0:smr-feb-2026-r1
samsung	android	16.0:smr-jan-2026-r1
samsung	android	16.0:smr-jul-2026-r1
samsung	android	16.0:smr-jun-2026-r1
samsung	android	16.0:smr-mar-2026-r1
samsung	android	16.0:smr-may-2026-r1
samsung	android	16.0:smr-nov-2025-r1
samsung	android	16.0:smr-oct-2025-r1
samsung	android	16.0:smr-sep-2025-r1
samsung	android	17.0

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=09