CVE-2026-21066

Improper input validation in libcodec2_sec_flacdec.so (Samsung's FLAC decoder) on Samsung devices prior to the SMR Aug-2026 Release 1 patch allows local attackers to write out-of-bounds memory, potentially enabling privilege escalation. No in-the-wild exploitation is reported. Patch: SMR Aug-2026...

PT-2026-69394

Name of the Vulnerable Software and Affected Versions libcodec2 sec flacdec.so versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the libcodec2 sec flacdec.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when...

PT-2020-11693

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in the libcodec2 soft mp3dec component due to uninitialized data. This could lead to remote information disclosure without requiring additional...