CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2026-55097

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...

EUVD-2026-55096

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071

Improper input validation in the MPEG4 codec within libsavsvc.so allows local attackers to write out-of-bounds memory on Samsung devices prior to the SMR Aug-2026 Release 1 update. NVD rates it HIGH (CVSS 7.8) requiring low privileges; Samsung rates it MEDIUM (CVSS 5.1). No exploitation details a...

EUVD-2026-55094

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

A type-conversion bug in the VC1 codec of libsavsvc.so allows local attackers to write out-of-bounds memory. Exploitation requires local access with low privileges. No in-the-wild exploitation is reported. Fix: update to Samsung SMR Aug-2026 Release 1.

CVE-2026-21072: Improper Input Validation

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-69399

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the MPEG4 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when ...

PT-2026-69400

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the VC1 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when a...

PT-2026-69397

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1 Description An incorrect conversion between numeric types in the VC1 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds...

CVE-2026-21069: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...