CVE-2026-21069

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1

Description An incorrect conversion between numeric types in the VC1 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption.

Recommendations Update libsavsvc.so to SMR Aug-2026 Release 1 or a newer version.