{"id":"CVE-2026-21042","title":"Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.","summary":"Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.","severity":"high","cvss":8.7,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","cwe":["CWE-787"],"vendor":"Samsung Mobile","product":"Samsung Mobile Devices","affected":["devices (all versions)"],"published":"2026-07-10","updated":"2026-09-09","sourceUpdated":"2026-09-09T05:17:20.337","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-21042","references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=07","label":"mobile.security@samsung.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-07-10T00:00:00+00:00"},"cvssSource":"cna","epss":0.00436,"epssPercentile":0.37413,"ingestedAt":"2026-07-11T20:15:25.891Z","slug":"CVE-2026-21042","body":"## Overview\n\nOut-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":47.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201476,"id":"CVE-2026-21042","ts":1789399488362,"field":"cvss","old":null,"new":"8.7"},{"seq":201475,"id":"CVE-2026-21042","ts":1789399488362,"field":"severity","old":"none","new":"high"},{"seq":200210,"id":"CVE-2026-21042","ts":1789397015522,"field":"cvss","old":"8.7","new":null},{"seq":200209,"id":"CVE-2026-21042","ts":1789397015522,"field":"severity","old":"high","new":"none"},{"seq":198134,"id":"CVE-2026-21042","ts":1789391716481,"field":"cvss","old":null,"new":"8.7"},{"seq":198133,"id":"CVE-2026-21042","ts":1789391716481,"field":"severity","old":"none","new":"high"},{"seq":195927,"id":"CVE-2026-21042","ts":1789383362304,"field":"cvss","old":"8.7","new":null},{"seq":195926,"id":"CVE-2026-21042","ts":1789383362304,"field":"severity","old":"high","new":"none"},{"seq":194856,"id":"CVE-2026-21042","ts":1789380288674,"field":"cvss","old":null,"new":"8.7"},{"seq":194855,"id":"CVE-2026-21042","ts":1789380288674,"field":"severity","old":"none","new":"high"},{"seq":193643,"id":"CVE-2026-21042","ts":1789378226946,"field":"cvss","old":"8.7","new":null},{"seq":193642,"id":"CVE-2026-21042","ts":1789378226946,"field":"severity","old":"high","new":"none"},{"seq":192430,"id":"CVE-2026-21042","ts":1789376211841,"field":"cvss","old":null,"new":"8.7"},{"seq":192429,"id":"CVE-2026-21042","ts":1789376211841,"field":"severity","old":"none","new":"high"},{"seq":191217,"id":"CVE-2026-21042","ts":1789373086601,"field":"cvss","old":"8.7","new":null},{"seq":191216,"id":"CVE-2026-21042","ts":1789373086601,"field":"severity","old":"high","new":"none"},{"seq":190002,"id":"CVE-2026-21042","ts":1789369109844,"field":"cvss","old":null,"new":"8.7"},{"seq":190001,"id":"CVE-2026-21042","ts":1789369109844,"field":"severity","old":"none","new":"high"},{"seq":188789,"id":"CVE-2026-21042","ts":1789368015625,"field":"cvss","old":"8.7","new":null},{"seq":188788,"id":"CVE-2026-21042","ts":1789368015625,"field":"severity","old":"high","new":"none"},{"seq":187572,"id":"CVE-2026-21042","ts":1789364981368,"field":"cvss","old":null,"new":"8.7"},{"seq":187571,"id":"CVE-2026-21042","ts":1789364981368,"field":"severity","old":"none","new":"high"},{"seq":186359,"id":"CVE-2026-21042","ts":1789362964608,"field":"cvss","old":"8.7","new":null},{"seq":186358,"id":"CVE-2026-21042","ts":1789362964608,"field":"severity","old":"high","new":"none"},{"seq":185145,"id":"CVE-2026-21042","ts":1789360952811,"field":"cvss","old":null,"new":"8.7"},{"seq":185144,"id":"CVE-2026-21042","ts":1789360952811,"field":"severity","old":"none","new":"high"},{"seq":183932,"id":"CVE-2026-21042","ts":1789357890592,"field":"cvss","old":"8.7","new":null},{"seq":183931,"id":"CVE-2026-21042","ts":1789357890592,"field":"severity","old":"high","new":"none"},{"seq":182184,"id":"CVE-2026-21042","ts":1789354077409,"field":"cvss","old":null,"new":"8.7"},{"seq":182183,"id":"CVE-2026-21042","ts":1789354077409,"field":"severity","old":"none","new":"high"},{"seq":180977,"id":"CVE-2026-21042","ts":1789352913873,"field":"cvss","old":"8.7","new":null},{"seq":180976,"id":"CVE-2026-21042","ts":1789352913873,"field":"severity","old":"high","new":"none"},{"seq":179770,"id":"CVE-2026-21042","ts":1789349977534,"field":"cvss","old":null,"new":"8.7"},{"seq":179769,"id":"CVE-2026-21042","ts":1789349977534,"field":"severity","old":"none","new":"high"},{"seq":178563,"id":"CVE-2026-21042","ts":1789347768657,"field":"cvss","old":"8.7","new":null},{"seq":178562,"id":"CVE-2026-21042","ts":1789347768657,"field":"severity","old":"high","new":"none"},{"seq":177356,"id":"CVE-2026-21042","ts":1789346159359,"field":"cvss","old":null,"new":"8.7"},{"seq":177355,"id":"CVE-2026-21042","ts":1789346159359,"field":"severity","old":"none","new":"high"},{"seq":176149,"id":"CVE-2026-21042","ts":1789342703325,"field":"cvss","old":"8.7","new":null},{"seq":176148,"id":"CVE-2026-21042","ts":1789342703325,"field":"severity","old":"high","new":"none"},{"seq":175933,"id":"CVE-2026-21042","ts":1789342313765,"field":"cvss","old":null,"new":"8.7"},{"seq":175932,"id":"CVE-2026-21042","ts":1789342313765,"field":"severity","old":"none","new":"high"},{"seq":175473,"id":"CVE-2026-21042","ts":1789338356948,"field":"cvss","old":"8.7","new":null},{"seq":175472,"id":"CVE-2026-21042","ts":1789338356948,"field":"severity","old":"high","new":"none"},{"seq":174268,"id":"CVE-2026-21042","ts":1789334582928,"field":"cvss","old":null,"new":"8.7"},{"seq":174267,"id":"CVE-2026-21042","ts":1789334582928,"field":"severity","old":"none","new":"high"},{"seq":173063,"id":"CVE-2026-21042","ts":1789333190717,"field":"cvss","old":"8.7","new":null},{"seq":173062,"id":"CVE-2026-21042","ts":1789333190717,"field":"severity","old":"high","new":"none"},{"seq":171877,"id":"CVE-2026-21042","ts":1789330869789,"field":"cvss","old":null,"new":"8.7"},{"seq":171876,"id":"CVE-2026-21042","ts":1789330869789,"field":"severity","old":"none","new":"high"}]}