CyberRota Analysis
AI-GeneratedThe vulnerability arises from an incorrect conversion between numeric types in the VC1 codec within libsavsvc.so, allowing local attackers to exploit this flaw to write out-of-bounds memory. This could lead to potential code execution or system instability. Organizations utilizing affected versions of the software should prioritize patching to mitigate the risk of exploitation.
CVE
CVE-2026-21069
Severity
HIGH
CVSS
7.8
EPSS
0.10%
Original NVD Description
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
Related CVEs
Other vulnerabilities affecting the same vendor(s)