TizenFX
CVE-2026-85084
MEDIUM
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Local-only API requiring app-level privilege (PR:L); AC:H for specific memory-state prerequisite; C:N confirmed by write-path-only fix diff.
Primary rating from Vendor (samsung.tv_appliance).
CVSS VectorVendor: samsung.tv_appliance
Lifecycle Timeline
2DescriptionCVE.org
Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers.
AnalysisAI
Out-of-bounds write in Samsung TizenFX's MediaBufferBase component allows a local low-privileged attacker to corrupt memory by supplying unchecked array indices through the Tizen.Multimedia media buffer API. The vulnerable indexer property in Tizen.Multimedia.Common.Internal.MediaBufferBase lacked all bounds validation prior to fixes introduced in upstream PRs #7814 and #7815, admitting negative or oversized index values. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to a Tizen OS device (Samsung Smart TV, Galaxy Watch, or Tizen IoT appliance) with a low-privilege application or user context, consistent with PR:L in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.3 (AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) accurately reflects a moderate local-only vulnerability: exploitation requires physical or logical local access to a Tizen device, a low-privilege application or user context, and high attack complexity indicating specific memory-state or timing prerequisites beyond the attacker's full control. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the upstream fixes from Samsung TizenFX GitHub pull requests #7814 (https://github.com/Samsung/TizenFX/pull/7814) and #7815 (https://github.com/Samsung/TizenFX/pull/7815), which introduce bounds-checking validation in `MediaBufferBase.cs`. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today