PT-2026-88822 · Samsung · Samsung Mobile Devices+1

CVE-2026-21088

·

Published

2026-09-09

·

Updated

2026-09-09

CVSS v4.0

6.9

Medium

VectorAV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-21088

Affected Products

Samsung Mobile Devices
Android