Out-of-Bounds Write Vulnerability in ImsService by Samsung
CVE-2026-21047

8.3HIGH

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
28 July 2026

What is CVE-2026-21047?

The ImsService prior to the SMR July 2026 Release 1 is impacted by an out-of-bounds write vulnerability. This issue allows remote attackers to potentially execute arbitrary code on the affected systems. As such vulnerabilities can lead to extensive exploitation, it is crucial for users to ensure their systems are updated to the latest security patches to mitigate these risks.

Affected Version(s)

Samsung Mobile Devices SMR Jul-2026 Release in Android 14, 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.