Out-of-Bounds Write Vulnerability in Samsung One UI 8.5
CVE-2026-21111

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Libsthmbc
Vendor
CVE Published:
9 September 2026

What is CVE-2026-21111?

A vulnerability exists in libsthmbc.so within Samsung One UI versions prior to 8.5, allowing local attackers to perform out-of-bounds write operations. This flaw can lead to unexpected system behavior and potential exploitation, as attackers may manipulate memory outside of the intended data boundaries.

Affected Version(s)

libsthmbc One UI 8.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.