EUVD-2026-97184

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21119

The software component lib_sag_ai_sound_sep_v2.00.so is vulnerable to an out-of-bounds read and write condition in versions prior to the SMR Oct-2026 Release 1 . This flaw allows a local attacker to read from and write to memory outside of the intended boundaries. While the specific technical roo...

EUVD-2026-97183

Out-of-bounds read and write in libsagaisoundsepv2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory...

EUVD-2026-97182

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-21118

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-21118

An improper access control vulnerability exists in the DownloadProvider component on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to gain unauthorized access to files located within scoped storage . Exploitation details and specific exploit paths are not provided...

EUVD-2026-97181

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21117

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21116

An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows a local attacker to write to memory outside of its intended boundaries. While the technical impact is categorized as medium severity, specific details regarding exp...

EUVD-2026-97180

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21116

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21115

An out-of-bounds write vulnerability exists in the libcodec2-sec-flacdec.so component on devices running versions prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to write to out-of-bounds memory, potentially leading to memory corruption or other system impacts. Samsung has ...

EUVD-2026-97179

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21115

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2026-97178

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21114

An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code on the affected system. While the NCSC advisory notes broad vulnerabilities in Android, this specific CVE is identified as...

CVE-2026-108788

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...

CVE-2026-108788

A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The issue is located within the spawn function of the Sandbox component. By manipulating the Profile argument, an attacker can cause a sandbox issue. This attack can be launched on the local host . While the exploit...

EUVD-2026-97141

In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed...