CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner callback and status-update endpoints that return administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata without requiring any credentials. Unauthenticated network attackers can systematically enumerate panel administrators and recent scanner activity across multi-tenant hosting installations, enabling reconnaissance for follow-on credential attacks or phishing. No public exploit code has been identified at time of analysis; vendor-released patch version 2.4.6 is available.
Remote denial-of-service in PocketMine-MP before 5.42.1 allows unauthenticated network attackers to degrade server performance by sending LoginPackets whose clientData JWT bodies contain large numbers of arbitrary junk properties. The server's JsonMapper iterates over and logs a warning for every unexpected property, enabling log flooding and unbounded CPU waste with no authentication required. A publicly available proof-of-concept exists via the vendor's own GitHub security advisory; no active exploitation in the CISA KEV has been reported.
Resource exhaustion in PocketMine-MP before 5.25.2 allows unauthenticated Bedrock clients to degrade server availability by submitting crafted packets containing excessive delimiter characters across sign editing, JWT login, and command parsing endpoints. The root cause is PHP `explode()` being called without a limit parameter in multiple packet-handling paths, causing the server to allocate unbounded memory arrays proportional to delimiter count in attacker-controlled input. No CISA KEV listing exists, but a proof-of-concept is publicly available via the vendor's GitHub security advisory (GHSA-g274-c6jj-h78p); vendor assessment notes real-world impact is partially mitigated by existing packet decompression size limits already enforced upstream.
Session cookie leakage in Open WebUI versions 0.6.27 through 0.11.0 allows an attacker who operates a connected tool server to capture a victim user's Open WebUI session cookies and achieve full account takeover. The root cause is a Python closure-in-loop bug in tools.py where a shared cookie jar from the enclosing async loop was captured by all tool callable functions instead of being bound per-function; when a session- or OAuth-authenticated tool server was processed last in the initialization loop, its cookies were incorrectly propagated into requests directed at other attached servers. Vendor-released patch version 0.11.1 is available; no public exploit code or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in the Content Mask WordPress plugin before 1.8.5.6 allows any user holding at least a Contributor-level WordPress account to inject persistent malicious scripts into post content, which then execute in the browsers of all users - including administrators - who view or preview the affected page. Notably, the plugin's own built-in role-restriction feature fails to block the attack, widening the exploitation surface beyond what site operators may expect. A publicly available proof-of-concept exists via WPScan, though EPSS at 0.16% (6th percentile) and SSVC 'exploitation: none' indicate no observed mass exploitation at time of analysis.
Broken Windows directory-ownership verification in gix-sec (gitoxide's trust enforcement crate) causes all filesystem paths to be unconditionally trusted when the process runs with an unfiltered administrative token, nullifying safe.directory protections. Versions 0.13.2 and earlier of gix-sec contain a logic inversion in is_path_owned_by_current_user: the administrator-specific branch checks the SID of the running process against the Administrators group rather than checking the SID of the target directory, so both IsWellKnownSid and CheckTokenMembership always return true for elevated processes regardless of who actually owns the directory. A local limited-privilege attacker can plant a malicious Git repository (configuring core.sshCommand or hooks) in a shared or system-root location and trigger arbitrary code execution with full administrative rights when any admin-level gitoxide-backed operation encounters that path. No CISA KEV listing is present, but a working proof-of-concept is included in the GHSA advisory.
Stored cross-site scripting in the Sina Extension for Elementor WordPress plugin (versions before 3.10.4) allows authenticated users holding at least a Contributor role to inject persistent malicious scripts via an unescaped Table widget setting that is rendered inside an HTML attribute. When a higher-privileged user - such as an Editor or Administrator - views the affected page, the attacker-controlled script executes in their browser, enabling session hijacking, credential theft, or unauthorized administrative actions on the WordPress site. A publicly available proof-of-concept exists via WPScan, though EPSS stands at 0.15% (5th percentile) and no active exploitation is confirmed in CISA KEV.
Infinite-loop denial-of-service in Open WebUI 0.5.0-0.11.0 allows any authenticated user to permanently crash the backend service by storing id-less messages in a cyclic parent chain. The flaw in `get_message_list` (backend/open_webui/utils/misc.py) caused the chat-history traversal to never terminate, blocking the async event loop and consuming memory until the process died - with the condition persisting across restarts until an operator manually removes the offending messages or upgrades. No public exploit or active exploitation has been identified, but the low barrier (any login) and persistence across restarts make this an operationally impactful issue for self-hosted deployments.
Denial-of-service in Open WebUI versions 0.10.0 through 0.11.0 allows any authenticated user to permanently block all server-side request processing by submitting a cyclic chat message tree and then triggering the message-deletion endpoint. The DELETE /api/v1/chats/{id}/messages/{message_id} API delegates to a Python helper that traverses childrenIds in a while loop without recording visited node identifiers, entering an infinite loop that occupies the server's request thread indefinitely until the process is forcibly killed. No active exploitation or KEV listing is recorded, but the attack requires only a valid user session and no special configuration, making it a credible insider or compromised-credential threat for any multi-user deployment. Vendor-released patch is available in version 0.11.1.
Insufficient session expiration in Open WebUI 0.9.0-0.11.0 allows a demoted administrator to retain full read and write access to all users' collaborative notes by keeping an existing Socket.IO connection open after their role is revoked. The flaw exists because role updates applied through trusted role headers, OAuth role mapping, or SCIM provisioning write the new role to the database but do not invalidate the stale user record cached in the Socket.IO SESSION_POOL. The vulnerability is fixed in version 0.11.1; no public exploit code has been identified at time of analysis.
Unauthenticated shortcode injection in the Contact Form 7 Captcha WordPress plugin before 0.1.9 allows any site visitor to execute arbitrary WordPress shortcodes registered on the target site. The plugin incorrectly passes visitor-submitted form field values through the WordPress shortcode parser without sanitization, meaning an attacker submitting a shortcode tag as a form value triggers its execution in the rendered response. With a publicly available proof-of-concept and the breadth of shortcodes available across typical WordPress installations - some of which can include files, run PHP, or interact with other plugins - the practical impact can escalate beyond the conservative C:L/I:L baseline to full remote code execution, depending on the shortcodes registered on the site.
Unauthenticated shortcode injection in the CleanTalk WordPress anti-spam plugin before 6.87 allows any site visitor to trigger arbitrary shortcodes registered on the target WordPress site to execute server-side, with output persisted and rendered to every subsequent visitor of the affected page. Because shortcode execution scope depends entirely on which shortcodes third-party plugins have registered, actual impact can range from minor data leakage to server-side code execution if code-execution shortcodes are present. A publicly available exploit exists, and the vendor has released a patch in version 6.87.
Missing authorization on gift card redemption in Ultimate Gift Cards for WooCommerce (versions before 3.2.10) allows any authenticated subscriber to redeem gift cards belonging to other users, zeroing the victim's balance and crediting the full value to the attacker's own account. Two separate redemption code paths are affected: version 3.2.9 patched one path but left a second path vulnerable when a companion plugin from the same vendor is active; both paths are fully remediated in 3.2.10. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.14% (4th percentile) and SSVC indicates no confirmed active exploitation.
Item and experience duplication in PocketMine-MP before 5.39.2 allows any authenticated server player to exploit a race condition during another player's disconnection, causing inventory loot and XP to drop multiple times from a single death event. The InGamePacketHandler fetches entities via World->getEntity() without validating the flaggedForDespawn state, so the death handler can fire multiple times for the same disconnect-death event if a crafted attack packet arrives within the narrow timing window. A detailed proof-of-concept with exact reproduction steps is publicly available via the vendor's GitHub Security Advisory; vendor patch 5.39.2 is available and no KEV listing exists.
The Payment Plugins for PayPal WooCommerce WordPress plugin (versions 1.1.0 through 2.0.25) fails to verify that a stored PayPal vault payment method token belongs to the authenticated user requesting to attach it, allowing any subscriber-level account holder to claim ownership of another customer's vaulted card. Once bound to the attacker's account, the victim's stored payment method can be charged fraudulently or permanently deleted. A publicly available proof-of-concept exists per WPScan, though EPSS (0.13%, 3rd percentile) and SSVC exploitation status 'none' indicate no widespread active exploitation at time of analysis.
Missing authentication on the Invoice Generation endpoint in Rizwan17's inventory-management-system (PHP, all commits through bfe78a33) allows unauthenticated remote attackers to manipulate the `order_date` and `invoice_no` parameters in `includes/invoice_bill.php` without any credential check (CWE-306). The CVSS 4.0 vector confirms PR:N/UI:N exploitation with low integrity and availability impact and no confidentiality exposure. A public proof-of-concept has been disclosed via GitHub issue #14, and the project maintainer has not yet responded to the report, leaving no patch available at time of analysis.
SQL injection in Rizwan17's inventory-management-system allows unauthenticated remote attackers to manipulate database queries via the `pro_name[]` array parameter in the `storeCustomerOrderInvoice` function of `includes/manage.php`. The CVSS 4.0 vector (PR:N/AC:L/AT:N) confirms no authentication is required and exploitation is straightforward. A public proof-of-concept exists via GitHub issue #13, and the vendor has not responded to the disclosure, leaving no patch available.
Stored cross-site scripting in the Orbit Fox WordPress plugin (before version 3.0.9) allows users holding at minimum contributor-level access to inject arbitrary JavaScript by supplying an unsanitized HTML tag name within a Beaver Builder widget, with the malicious script persisting in page markup and executing in the browser of every subsequent visitor. The vulnerability carries a CVSS 5.4 Medium score and a publicly available proof-of-concept has been confirmed by WPScan, lowering the bar for exploitation on multi-author sites. No active exploitation is confirmed in CISA KEV at time of analysis, and the EPSS score of 0.15% reflects low automated exploitation probability.
Missing authorization controls in WPLP Cookie Consent WordPress plugin before 4.4.2 allow any subscriber-level authenticated user to invoke privileged AJAX actions without nonce or capability verification. Affected actions expose administrator scan data for reading and deletion, and permit complete overwrite of the plugin's stored configuration by low-privileged users. A publicly available exploit exists per WPScan, though EPSS is 0.13% (3rd percentile), indicating limited observed exploitation activity to date.
Unauthenticated payment cancellation in WP Travel WordPress plugin before 12.0.2 allows any remote actor to cancel a payment on any customer booking by exploiting a missing authorization check on a front-end payment-message handler. The plugin fails to verify that the requester is entitled to act on the targeted booking, enabling arbitrary booking disruption without credentials. A publicly available proof-of-concept reported by WPScan amplifies practical risk beyond the low 0.15% EPSS score, making opportunistic exploitation plausible against any exposed installation.
Unauthenticated content disclosure in the Kirki WordPress plugin before 6.3.0 allows any remote attacker to retrieve the full rendered page content of posts that are in private, draft, pending, or trashed states. The plugin renders and returns post content without first verifying whether the requesting party holds read permissions for that post, effectively bypassing WordPress's built-in visibility controls. A publicly available proof-of-concept exists via WPScan, though EPSS probability remains low at 0.14%, and the flaw has not been added to CISA KEV as of this analysis.
SupportCandy WordPress plugin before version 3.5.3 allows unauthenticated users to read the full contents of any support ticket by exploiting a missing pre-validation step on per-ticket authorization codes. The plugin discloses the genuine authorization code to any requester before verifying whether the submitted code is valid, effectively inverting the access control check and rendering the protection mechanism moot. A publicly available exploit exists via WPScan; no active exploitation has been confirmed by CISA KEV, and EPSS sits at 0.14%.
Unauthenticated information disclosure in SupportCandy WordPress plugin before 3.5.3 exposes protected customer-uploaded support ticket attachments to any remote attacker. The attachment download endpoint lacks an authorization check and uses sequential numeric identifiers, enabling trivial enumeration of all attachments across all tickets regardless of ticket visibility or customer ownership. A publicly available exploit exists per WPScan, though EPSS at 0.14% (4th percentile) indicates limited observed exploitation activity at time of analysis.
Unauthenticated order data exposure in the Payment Plugins for PayPal WooCommerce WordPress plugin before version 2.0.26 allows remote attackers to harvest customer PII from any WooCommerce order. The plugin outputs order secrets into frontend JavaScript configuration without first validating the supplied order key, and because WooCommerce order identifiers are sequential integers, an attacker can iterate through IDs to retrieve the secret for each order and subsequently access that customer's billing address, shipping address, and associated personal details. A publicly available proof-of-concept exists; no active exploitation is confirmed by CISA KEV at time of analysis.
Unauthenticated billing data exposure in Payment Plugins for Stripe WooCommerce (versions before 4.0.12) allows any remote attacker to enumerate all WooCommerce orders and retrieve their full billing details plus the per-order secret key embedded in front-end JavaScript. The root cause is missing order key validation before order data is serialized into the plugin's client-side configuration, combined with WooCommerce's use of sequential, predictable order identifiers that make enumeration trivial. A publicly available exploit exists per WPScan, and the SSVC assessment confirms the attack is automatable, though EPSS remains low (0.14%) suggesting no widespread active exploitation at time of analysis.
Price manipulation via IDOR in Sunshine Photo Cart WordPress plugin before 3.7 allows unauthenticated shoppers to complete purchases at arbitrarily reduced prices. The plugin accepts a client-supplied price identifier when adding items to the cart but never verifies that the identifier belongs to the item being purchased, enabling any visitor to reference a cheaper price entry from elsewhere on the site and check out at that lower amount. No public exploitation confirmed via CISA KEV, but WPScan has published a proof-of-concept, and EPSS sits at 0.14% (3rd percentile), indicating low automated scanning pressure despite the trivial exploit condition.
Enrollment record exposure in the Masteriyo LMS WordPress plugin (versions 1.3.1 through below 3.4.0) lets unauthenticated attackers retrieve any learner's enrollment status, progress data, and timestamps by iterating sequential integer record identifiers against the plugin's REST API - a classic IDOR pattern with no authorization gate. A secondary gap extends the exposure to authenticated enrolled users, who can similarly read other learners' records without restriction. A publicly available proof-of-concept is documented by WPScan, though no confirmed active exploitation (CISA KEV) has been recorded.
Payment bypass in the WP Express Checkout WordPress plugin (versions before 2.5.0) allows unauthenticated users to forge completed order records without submitting actual payment. The plugin fails to perform server-side validation against the payment processor to confirm a transaction was successfully completed, trusting client-supplied signals instead. Any visitor to an affected WordPress store can obtain goods or services for free, making this a high-impact business-logic flaw despite its moderate CVSS score. A publicly available exploit exists via WPScan, and no public exploitation (KEV) has been confirmed at time of analysis.
Unauthenticated arbitrary option overwrite in WPLP Cookie Consent WordPress plugin before 4.4.2 lets any remote visitor corrupt a site-wide WordPress option with attacker-controlled data. The vulnerable consent-state persistence routine lacks both WordPress capability checks (CWE-862) and CSRF token validation, and it fires unconditionally on every front-end page load - no special request path or trigger required. A WPScan-published POC is publicly available; no active exploitation is confirmed in CISA KEV.
Path traversal in GitHacker ≤1.1.7 allows a malicious git server to coerce the tool into reading arbitrary files from the victim's local filesystem via an unsanitized `ref:` value in a crafted `.git/HEAD`. The exploitable primitive is narrower than full arbitrary file-read: the recovery loop converts every 40-character hex substring in any accessed file into an outbound HTTP GET back to the attacker's server, yielding an existence oracle for arbitrary paths and hex-fragment exfiltration for files containing cryptographic material such as password hashes, HMAC-SHA1 outputs, or SSH key fingerprints. Exploitation requires the victim to actively run GitHacker against an attacker-controlled URL; no public exploit code has been identified at time of analysis, and a vendor-released patch is available as version 1.1.8.
Network amplification in PocketMine-MP before 5.39.2 allows authenticated game clients to trigger server-broadcast consuming animations for all visible players by sending crafted ActorEventPacket messages. Each malicious packet causes the server to invoke ConsumingItemAnimation.broadcastAnimation() for every peer in range, multiplying network load and CPU/memory consumption proportionally to the online player count. A publicly available proof-of-concept exists via the GitHub security advisory; no active exploitation has been confirmed in CISA KEV.
Stored cross-site scripting in MaxSite CMS versions 0.94 through 109.6 stems from the admin_page plugin's upload handler accepting unrestricted HTML file uploads, placing attacker-controlled content in a publicly accessible web directory. Any authenticated low-privilege user can upload an HTML file containing malicious JavaScript to uploads/_pages/, where it executes in visitors' browsers upon access. A publicly available proof-of-concept exploit exists; active exploitation has not been confirmed in CISA KEV, but the persistent execution path and low-privilege requirement make this a realistic risk for multi-author deployments.
SSRF filter-bypass in Open WebUI 0.9.5-0.11.0 allows authenticated users to route server-side fetches to private networks, loopback addresses, and cloud metadata endpoints by exploiting unvalidated HTTP redirect destinations. When AIOHTTP_CLIENT_ALLOW_REDIRECTS is enabled, the platform applies WEB_FETCH_FILTER_LIST and private-address controls only to the initial request URL, not to redirect hops - allowing a crafted redirect chain to reach AWS IMDS, Azure platform channels, or internal services. No public exploit exists and the issue is not in CISA KEV, but the scope-changed CVSS vector (S:C) and potential exposure of cloud IAM credentials in hosted deployments elevate practical risk above the 5.0 base score.
Shortcode injection in the Hustle WordPress plugin (versions prior to 7.8.14.2) allows unauthenticated remote attackers to execute any shortcode registered on the target site by embedding nested shortcode syntax in form submission field values. The plugin substitutes submitted values into its post-submission success message, and while a guard exists to prevent shortcode execution, it can be defeated through shortcode nesting - causing WordPress to process and execute arbitrary registered shortcodes in the response. A publicly available proof-of-concept exploit exists, and a vendor patch is available in version 7.8.14.2.
Open redirect in the Groundhogg CRM, Newsletters, and Marketing Automation WordPress plugin (versions before 4.7.2) allows unauthenticated attackers to weaponize the plugin's own email preference confirmation flow as a phishing vector. The confirmation endpoint fails to validate that its redirect target parameter points to the same site host, so a crafted confirmation link can silently forward the clicking visitor to any attacker-controlled URL. No public exploitation has been recorded in CISA KEV, but WPScan has confirmed the issue with a publicly available proof-of-concept.
Memory exhaustion in KeePass 2.35 through 2.61.1 crashes the password manager when a user opens a crafted KDBX database file whose header fields declare excessive allocation lengths. The ReadHeaderField function performs no bounds validation before honoring attacker-controlled length values, enabling gigabyte-scale memory allocations that exhaust system RAM and terminate the process. A proof-of-concept is publicly available on GitHub; no active exploitation is confirmed in CISA KEV, and real-world impact is confined to application availability - stored credentials are not exposed.
Infinite CPU and memory exhaustion in Open WebUI 0.10.0-0.11.0 allows any authenticated user to trigger a persistent server-side denial of service by exploiting missing cycle detection in the folder tree API. The folder parent-update endpoint accepted self-referential or descendant-referential reparenting requests, storing a circular linked structure in the database. Subsequent folder operations - delete and read traversals - followed parent pointers indefinitely, consuming server resources until the cycle was manually repaired in the database. No public exploit code beyond the patch PR has been identified at time of analysis.
Calendar alert suppression in Open WebUI versions 0.9.0 through 0.11.0 allows an authenticated low-privileged user to permanently disable reminder notifications instance-wide by storing a non-numeric `alert_minutes` value in a calendar event. The flaw in `backend/open_webui/models/calendar.py` causes the shared upcoming-event scheduler to raise an unhandled exception when it attempts numeric comparison on the unvalidated user-controlled field, aborting the entire alert pass and silencing reminders for every user while the malicious event remains in the lookahead window. No public exploit code or active exploitation has been identified; vendor-released patch version 0.11.1 resolves the issue.
Folder write-access bypass in Open WebUI 0.10.0 through 0.11.0 allows authenticated users to inject chats into shared folders where they hold only read-only or no write permission. The chat completion endpoints POST /api/chat/completions and POST /api/v1/chat/completions in main.py accepted a client-supplied folder_id from request metadata and persisted the resulting chat record under that folder without invoking the has_folder_write_access check that the dedicated chat-creation routes enforced. No public exploit or CISA KEV listing has been identified at time of analysis; the vendor confirmed the fix in v0.11.1.
Information disclosure in Open WebUI 0.7.0-0.10.x allows authenticated low-privilege users to enumerate the identifiers, names, and descriptions of knowledge bases they are not authorized to access. The built-in knowledge search tool constructed a metadata filter restricting results to the caller's readable collections, but all eleven shipped vector-store backends (Elasticsearch, Milvus, Milvus Multitenancy, OpenGauss, and others) silently ignored that filter during search execution. No public exploit has been identified at time of analysis; the vendor released a fix in v0.11.1 confirmed by GitHub Security Advisory GHSA-pcvc-8vrv-8q6w.
Missing authorization on a cookie-scanner AJAX endpoint in the WPLP Cookie Consent WordPress plugin before 4.4.2 allows any authenticated user with subscriber-level access to read the automated scan schedule configured by an administrator. The flaw (CWE-862) stems from the absence of both nonce validation and WordPress capability checks on the AJAX action handler. While impact is limited to information disclosure of scheduling configuration, a publicly available exploit via WPScan and low barrier to exploitation (any registered user) make patching advisable for all affected sites.
Missing authorization in WPLP Cookie Consent WordPress plugin (versions 3.6.5 through before 4.4.2) allows any authenticated user - including low-privilege subscribers - to overwrite the site-wide cookie consent banner configuration shown to all visitors and irreversibly destroy accumulated A/B test result data. The flaw stems from absent WordPress capability and nonce checks on A/B testing action handlers, meaning no admin intent is required. A POC is publicly available via WPScan; no CISA KEV listing exists and EPSS sits at the 3rd percentile, suggesting opportunistic rather than targeted exploitation.
Authenticated SQL injection in the Quentn WP WordPress plugin before 1.2.15 allows high-privilege users (administrators) to execute arbitrary SQL queries against the underlying database via an unsanitized parameter. Although the attack vector is network-accessible and no authentication bypass is needed, exploitation is constrained to administrators, significantly limiting real-world risk. A publicly available exploit code exists via WPScan, though EPSS remains very low at 0.16% (5th percentile), indicating no widespread opportunistic exploitation at time of analysis.
Unauthenticated information disclosure in AlchemyCMS affects all 7.x versions before 7.4.16 and all 8.x versions before 8.3.6 via the GET /api/nodes REST endpoint, which returned the full navigation node dataset without any authorization check. Any network-reachable attacker could enumerate restricted page names, internal URL paths, and cross-site navigation structures across all languages. No public exploit identified at time of analysis, but the attack requires only a single unauthenticated HTTP request, making automated scanning trivial.
Relative path traversal in Ragic Enterprise Cloud Database enables privileged remote attackers to read arbitrary files from the underlying server filesystem. Exploitation requires high-privilege authenticated access (PR:H per the CVSS 4.0 vector AV:N/AC:L/AT:N/PR:H), meaning an attacker must first hold or compromise an elevated account within the platform before leveraging the traversal to exfiltrate sensitive system files. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis; the vulnerability was disclosed via TWCERT advisories.
Snipe-IT before version 8.7.0 permanently destroys its database when a superuser uploads a corrupted or invalid ZIP archive to the backup restore endpoint, because the wipe operation executes before input validation occurs. The root cause is a validate-after-act ordering flaw (CWE-460): the restore workflow irreversibly clears the database first, then attempts to parse the archive - leaving no rollback path on failure. Exploitation requires superuser privileges and deliberate file upload (CVSS 4.0 PR:H/UI:P), but the consequence is total, unrecoverable data loss for the affected Snipe-IT instance.
Information disclosure in Siyuan note-taking software before v3.8.2 allows unauthenticated publish-mode readers to probe the existence and quantity of private or unpublished content via the full-text search API. The POST /api/search/fullTextSearchBlock endpoint correctly withholds actual block content from hidden documents but leaks unfiltered match counts - the number of matching blocks and pages - enabling attackers to use the search API as an oracle to systematically map the structure of private content without ever seeing it. No public exploit code has been identified at time of analysis, and the vendor has released a patch in v3.8.2.
Null pointer dereference in mrubyc through 4.0.0 allows an attacker who can supply untrusted .mrb bytecode to crash any application embedding the VM. The op_enter() handler in src/vm.c fails to validate execution context before dereferencing, and OP_ENTER instructions placed at the top level of a crafted bytecode file - where no call frame exists - trigger the dereference and terminate the embedding application. No public exploit or active exploitation has been identified at time of analysis, and real-world risk is bounded by the requirement to feed attacker-controlled bytecode to the target application.
Out-of-bounds memory write in Samsung's libsubextractor.so subtitle parsing library affects Samsung Mobile Devices running Android 14 through 17, exploitable by a local attacker who induces the device owner to open or play media containing a maliciously crafted subtitle track. The flaw carries a high integrity impact rating consistent with a memory-corruption primitive capable of enabling code execution within the media processing context, patched in the SMR Sep-2026 Release 1 monthly security update. No public exploit code or active exploitation has been identified at time of analysis.
Out-of-bounds memory write in Samsung's libsubextractor.so subtitle processing library allows local attackers to corrupt memory by exploiting improper input validation when removing style tags from subtitle content. Affected devices run Android 14 through 17 and are fixed in SMR Sep-2026 Release 1, disclosed through Samsung's monthly security bulletin. No public exploit identified at time of analysis, though the integrity impact is rated high (VI:H in CVSS 4.0), suggesting realistic potential for privilege escalation or code execution if chained with further exploitation.