CVE-2026-21089 - Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory

Back Back to CVE browser

MEDIUM

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory

Published Sep 9, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.10%

Description

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74630
Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=09
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74630		Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=09		Vendor Advisory