CyberRota Analysis
AI-GeneratedImproper input validation in the libsubextractor.so library prior to the SMR Sep-2026 Release 1 allows local attackers to exploit this vulnerability to write out-of-bounds memory, potentially leading to arbitrary code execution or system instability. Organizations utilizing affected versions of this library should prioritize patching to mitigate the risk of local exploitation.
CVE
CVE-2026-21089
Severity
HIGH
CVSS
7.8
EPSS
0.10%
Original NVD Description
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
Related CVEs
Other vulnerabilities affecting the same vendor(s)