CyberRota Analysis
AI-GeneratedImproper input validation in the VC1 codec within libsavsvc.so allows local attackers to exploit out-of-bounds memory write vulnerabilities, potentially leading to arbitrary code execution or system instability. Organizations utilizing affected versions of this library should prioritize patching to mitigate the risk of local exploitation. This vulnerability is particularly relevant for developers and system administrators managing multimedia processing applications.
CVE
CVE-2026-21072
Severity
MEDIUM
CVSS
5.1
EPSS
0.12%
Original NVD Description
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.