Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    FKIE_CVE-2026-21119

    Vulnerability from fkie_nvd - Published: 2026-10-12 05:17 - Updated: 2026-10-12 05:17
    Summary
    Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
    Impacted products
    Vendor Product Version

    {
      "affected": [
        {
          "affectedData": [
            {
              "defaultStatus": "affected",
              "product": "Samsung Mobile Devices",
              "vendor": "Samsung Mobile",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "SMR Oct-2026 Release in Selected Android 16, 17",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "source": "mobile.security@samsung.com"
        }
      ],
      "cveTags": [],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory."
        }
      ],
      "id": "CVE-2026-21119",
      "lastModified": "2026-10-12T05:17:00.407",
      "metrics": {
        "cvssMetricV40": [
          {
            "cvssData": {
              "Automatable": "NOT_DEFINED",
              "Recovery": "NOT_DEFINED",
              "Safety": "NOT_DEFINED",
              "attackComplexity": "LOW",
              "attackRequirements": "NONE",
              "attackVector": "LOCAL",
              "availabilityRequirement": "NOT_DEFINED",
              "baseScore": 4.8,
              "baseSeverity": "MEDIUM",
              "confidentialityRequirement": "NOT_DEFINED",
              "exploitMaturity": "NOT_DEFINED",
              "integrityRequirement": "NOT_DEFINED",
              "modifiedAttackComplexity": "NOT_DEFINED",
              "modifiedAttackRequirements": "NOT_DEFINED",
              "modifiedAttackVector": "NOT_DEFINED",
              "modifiedPrivilegesRequired": "NOT_DEFINED",
              "modifiedSubAvailabilityImpact": "NOT_DEFINED",
              "modifiedSubConfidentialityImpact": "NOT_DEFINED",
              "modifiedSubIntegrityImpact": "NOT_DEFINED",
              "modifiedUserInteraction": "NOT_DEFINED",
              "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
              "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
              "modifiedVulnIntegrityImpact": "NOT_DEFINED",
              "privilegesRequired": "LOW",
              "providerUrgency": "NOT_DEFINED",
              "subAvailabilityImpact": "NONE",
              "subConfidentialityImpact": "NONE",
              "subIntegrityImpact": "NONE",
              "userInteraction": "NONE",
              "valueDensity": "NOT_DEFINED",
              "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
              "version": "4.0",
              "vulnAvailabilityImpact": "LOW",
              "vulnConfidentialityImpact": "LOW",
              "vulnIntegrityImpact": "LOW",
              "vulnerabilityResponseEffort": "NOT_DEFINED"
            },
            "source": "mobile.security@samsung.com",
            "type": "Secondary"
          }
        ]
      },
      "published": "2026-10-12T05:17:00.407",
      "references": [
        {
          "source": "mobile.security@samsung.com",
          "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026\u0026month=10"
        }
      ],
      "sourceIdentifier": "mobile.security@samsung.com",
      "vulnStatus": "Received"
    }

    NCSC-2026-0405

    Vulnerability from csaf_ncscnl - Published: 2026-10-07 15:21 - Updated: 2026-10-07 15:21
    Summary
    Kwetsbaarheden verholpen in Google Android
    Scope
    38 vulnerabilities in this advisory, including CVE-2026-21119.
    CVE-2026-21119

    A vulnerability in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 permits local attackers to execute out-of-bounds memory read and write operations, potentially compromising system integrity.

    Known affected: 2 products
    Open the full advisory