Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

Samsung mobile devices let local attackers corrupt memory

CVE-2026-21115 · published 24 days ago
Summary

A flaw in the libcodec2-sec-flacdec.so library on Samsung mobile devices can let someone with access to the device write data beyond the intended memory area. This could cause the device to behave unexpectedly or crash. Apply the Samsung security update released in October 2026 to fix the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
samsung mobile samsung mobile devices All versions
Original advisory text
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published12 Oct 2026
Updated26 Oct 2026
First seen12 Oct 2026
Sources
CVE-2026-21115 · NVD
CVE-2026-21115 · MITRE
Track software like this
Free during beta