NetSight
high7.8

CVE-2026-21088

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memor…

Impact

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Affected products

VendorProductAffected versions
SamsungAndroid
Versions 14.0, 15.0, 16.0, 17.0

Weakness classification

References