CVE-2026-21087 - Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege

HIGH

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege

Published Sep 9, 2026

8.6

HIGH

CVSS 4.0

EPSS 0.12%

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74628		Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=09		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner SamsungMobile

Published Sep 9, 2026

Updated Sep 11, 2026

Reserved Dec 11, 2025

CISA Vulnrichment

Updated Sep 10, 2026

NVD

Status Analyzed

Modified Sep 11, 2026

Red Hat

No data

ENISA EUVD

Assigner SamsungMobile

Published Sep 9, 2026

Updated Sep 11, 2026

GitHub

No data