Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
History

Mon, 13 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in Samsung libpadm.so Enabling Local Code Execution
Weaknesses CWE-787

Sun, 12 Jul 2026 05:45:00 +0000

Type Values Removed Values Added
Title Out‑of‑bounds write in Samsung libpadm.so allows local code execution
Weaknesses CWE-787

Fri, 10 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 10 Jul 2026 12:45:00 +0000

Type Values Removed Values Added
Title Out‑of‑bounds write in Samsung libpadm.so allows local code execution
Weaknesses CWE-787

Fri, 10 Jul 2026 07:30:00 +0000

Type Values Removed Values Added
First Time appeared Samsung Mobile
Samsung Mobile samsung Mobile Devices
Vendors & Products Samsung Mobile
Samsung Mobile samsung Mobile Devices

Fri, 10 Jul 2026 05:15:00 +0000

Type Values Removed Values Added
Description Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
References
Metrics cvssV4_0

{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: SamsungMobile

Published: 2026-07-10T04:58:11.656Z

Updated: 2026-07-11T03:55:18.770Z

Reserved: 2025-12-11T01:33:35.817Z

Link: CVE-2026-21049

cve-icon Vulnrichment

Updated: 2026-07-10T12:18:07.721Z

cve-icon NVD

No data.

cve-icon Redhat

No data.