Out-of-Bounds Write Vulnerability in Samsung's libpadm.so Library
CVE-2026-21049

8.4HIGH

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
10 July 2026

What is CVE-2026-21049?

An out-of-bounds write vulnerability exists in the libpadm.so library, which allows local attackers to exploit the flaw. This issue can lead to arbitrary code execution, compromising the integrity and security of affected systems. Users should prioritize updating to the latest version to mitigate this risk, as the flaw is present in versions prior to the SMR Jul-2026 Release 1.

Affected Version(s)

Samsung Mobile Devices SMR Jul-2026 Release in Android 14, 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.