Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

Libsavsvc.so VC1 Codec Input Validation Flaw

CVE-2026-21072 · published 2 months ago
Summary

A flaw exists in the VC1 codec of the libsavsvc.so library. Local attackers can exploit this flaw to write data to areas of memory they shouldn't have access to. Update to the SMR Aug-2026 Release 1 or later to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
samsung mobile samsung mobile devices All versions
samsung android 14.0
15.0
16.0
cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*
Original advisory text
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
References
Severity
5.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published10 Aug 2026
Updated26 Oct 2026
First seen10 Aug 2026
Sources
CVE-2026-21072 · NVD
CVE-2026-21072 · MITRE
Track software like this
Free during beta