CVE-2026-21126

Published 12 October 2026 · tracked since 12 October 2026

Description

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-84166 MEDIUM 4.3
• CVE-2026-108805 HIGH 7.3
• CVE-2026-108806 HIGH 7.3
• CVE-2025-15703 LOW 3.5
• CVE-2026-107791 MEDIUM 6.5
• CVE-2026-87690 HIGH 8.8
• CVE-2026-21133
• CVE-2026-21134
• CVE-2026-21135
• CVE-2026-21139

→ Open the live CVE board · all tools