CVE-2026-21065

Summary

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesSMR Aug-2026 Release in Android 14, 15, 16 < *unaffected

Weaknesses

  • CWE-20: Improper Input Validation

References