EUVD-2026-55092
GHSA-2245-mc68-9v34
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector with no privilege requirement; subsequent-system impact present in CVSS 4.0 (SC:L/SI:L/SA:L) maps to scope change in 3.1, all impacts low.
Primary rating from Vendor (SamsungMobile).
CVSS VectorVendor: SamsungMobile
Lifecycle Timeline
2DescriptionCVE.org
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
AnalysisAI
Out-of-bounds memory write in libsmsd.so affects all Samsung Mobile Devices running firmware prior to SMR Aug-2026 Release 1, exploitable by a local unprivileged attacker with no special privileges required. The flaw in Samsung's SMS daemon shared library allows memory corruption that could destabilize the smsd process or, with additional technique, enable code execution within the daemon's privilege context. No public exploit identified at time of analysis, and no CISA KEV listing; however, low attack complexity combined with zero privilege requirements makes this actionable for any malicious app or shell-level actor on an unpatched device.
Technical ContextAI
libsmsd.so is the shared library backing Samsung's SMS daemon (smsd), which handles SMS message processing on Samsung Android firmware. The vulnerability is rooted in improper input validation - when the daemon processes malformed or adversarially crafted input, it writes data beyond the intended buffer boundary, corrupting adjacent memory. Although no CWE is formally assigned in NVD, Samsung's 'Buffer Overflow' tag is consistent with CWE-787 (Out-of-Bounds Write) behavior. The affected CPE cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:* covers all Samsung Mobile Device variants across all architectures, indicating this is a platform-wide library issue rather than device-model-specific. The CVSS 4.0 vector AV:L/AC:L/AT:N/PR:N/UI:N confirms local exploitation with no attack prerequisites beyond device access.
RemediationAI
The primary remediation is to update all Samsung Mobile Devices to SMR Aug-2026 Release 1 or later, which contains the patched libsmsd.so. Enterprise MDM administrators should deploy the August 2026 Samsung Monthly Release across managed device fleets as a priority; consumer users should apply the update via Settings > Software Update. The vendor advisory at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=08 provides model-specific update availability and instructions. Where patching is not immediately feasible, restricting sideloaded or untrusted application installation via MDM policy reduces the local attack surface, since exploitation requires a local code execution foothold - however, this compensating control does not eliminate the vulnerability and should be treated as temporary. Disabling or restricting SMS-related application permissions via Android permission management may also reduce exposure to the daemon's attack surface, though functional trade-offs include degraded messaging capability.
More in Samsung Mobile Devices
View allOut-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile
Remote code execution in Samsung Mobile Devices arises from a heap-based buffer overflow in the JPEG decoding path of li
Remote code execution in the DNG (Adobe Digital Negative) image decoder within Samsung's Quram imaging library (libimage
Path traversal in Samsung's ImsService (IP Multimedia Subsystem Service) on Android 14 through 17 permits remote unauthe
Out-of-bounds write in libmdnie.so on Samsung Mobile Devices running Android 15, 16, and 17 enables local attackers to e
Local privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
Improper input validation in Samsung's DualDAR kernel driver enables a local privileged attacker to escalate privileges
We need to produce a comprehensive analysis for CVE-2026-21047. Let's gather all provided data: CVE ID, description: "Ou
Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
Heap buffer overflow in Samsung KnoxVault trustlet (hwvault trusted application) on Samsung Mobile Devices prior to SMR
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today