CVE-2026-21111: Samsung Mobile Libsthmbc

Medium severity, CVSS 6.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.

Affected products

• Samsung Mobile Libsthmbc

Published 2026-09-09. Last modified 2026-09-10.