An out-of-bounds write vulnerability exists in the Samsung TTS library, libsamsungtts.so, allowing an attacker to overwrite memory beyond intended bounds. This flaw can enable the attacker to execute arbitrary code on the device. The impact is the compromise of confidentiality, integrity, and availability of the affected device, limited to the local context in which the attacker can run code.

Samsung Mobile Devices are affected. The vulnerability is present in all firmware versions prior to the Oct-2026 Release 1 update distributed by Samsung Mobile. Version details specific to the affected releases are not provided in the advisory. Users should verify the firmware version on their device and compare it to the release notes for the October 2026 update.

The CVSS score of 7 reflects a high severity vulnerability. Because the exploit requires local access, the likelihood of exploitation is lower than a network-exposed flaw, but it remains a serious risk to end users. The EPSS score is < 1%, indicating a very low but nonzero probability of exploitation, and the vulnerability is not listed in CISA's KEV catalog. The available mitigation is to install the latest firmware from Samsung Mobile that includes the October 2026 update, which addresses the out-of-bounds write.