CVE-2026-21085

An out-of-bounds write vulnerability in the Keymaster trustlet prior to the SMR Sep-2026 Release 1 allows local privileged attackers to manipulate memory, potentially leading to arbitrary code execution or system compromise. Organizations utilizing affected products should prioritize patching this vulnerability to mitigate the risk of exploitation by malicious insiders or compromised accounts.