Samsung Mobile EUVD-2026-55090

Q: What is the CVSS score of EUVD-2026-55090?

EUVD-2026-55090 has a CVSS 4.0 base score of 4.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-21065 MEDIUM

Improper Input Validation (CWE-20)

2026-08-10 SamsungMobile

GHSA-9qvh-m28f-hcq2

Buffer Overflow Samsung Mobile Devices Samsung Mobile

4.8

CVSS 4.0 · Vendor: SamsungMobile

Severity by source

Vendor (SamsungMobile) PRIMARY

4.8 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Local vector with low privileges to invoke codec API; bounded memory corruption with no scope change and limited C/I/A impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (SamsungMobile).

CVSS VectorVendor: SamsungMobile

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Aug 10, 2026 - 09:22 NVD

4.4 (MEDIUM) 4.8 (MEDIUM)

Analysis Generated

Aug 10, 2026 - 09:01 vuln.today

CVE Published

Aug 10, 2026 - 07:40 cve.org

MEDIUM 4.4

DescriptionCVE.org

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

AnalysisAI

Out-of-bounds write in Samsung's libcodec2secqcelpdec.so QCELP audio codec decoder library allows local attackers holding low-privilege execution on affected Samsung devices to corrupt adjacent memory regions, with limited confidentiality, integrity, and availability impact confined to the vulnerable system. The flaw is addressed in SMR Aug-2026 Release 1, Samsung's August 2026 Security Maintenance Release covering all prior unpatched firmware builds. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS 4.0 score of 4.4 reflects the strictly local attack surface and bounded impact scope.

Technical ContextAI

The vulnerability resides in libcodec2secqcelpdec.so, Samsung's proprietary implementation of a QCELP (Qualcomm Code Excited Linear Prediction) audio codec decoder - a narrowband speech codec historically used in CDMA/3GPP2 voice infrastructure. An out-of-bounds write condition (functionally equivalent to CWE-787, though no CWE is formally assigned in this entry) occurs when the decoder processes crafted codec input, allowing writes beyond the intended buffer boundary into adjacent memory. The affected CPE string (cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*) uses a wildcard version field, indicating all Samsung Mobile firmware prior to the August 2026 SMR is in scope. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) confirms a local, low-complexity attack requiring no special environmental conditions beyond low-privilege device access, consistent with an application-layer codec invocation scenario.

RemediationAI

Apply Samsung SMR Aug-2026 Release 1, which patches the out-of-bounds write in libcodec2secqcelpdec.so. Users should update device firmware via Settings > Software Update and verify the installed security patch level reflects August 2026 or later. The vendor advisory at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08 provides the authoritative patch reference. As a compensating control on devices that cannot be immediately updated, restricting or auditing third-party application permissions - particularly apps with access to media codec or audio processing APIs - reduces the practical attack surface, though it does not eliminate the underlying vulnerability and may affect legitimate multimedia application functionality.