CVE-2026-85084
Received Received - Intake

Out-of-bounds Write in Samsung TizenFX

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: Samsung TV & Appliance

Description
Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-13
AI Q&A
2026-09-03
EPSS Evaluated
2026-09-12
NVD
CVE-2026-85084
EUVD
EUVD-2026-70295

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
samsung tizenfx *
samsung tizenfx 11.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-129 The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves an out-of-bounds write and improper validation of array index in Samsung Open Source TizenFX. It allows buffer overflows, which can lead to memory corruption or arbitrary code execution.

Detection Guidance

Detection of this vulnerability requires code-level inspection since it involves a missing bounds check in the MediaBufferBase class of the TizenFX framework. Review the set accessor in MediaBufferBase for proper array index validation. Check for memory corruption symptoms like crashes or unexpected behavior in multimedia components.

Impact Analysis

An attacker could exploit this to execute arbitrary code, escalate privileges, or cause system crashes. It primarily affects systems running Samsung TizenFX with improper input validation.

Compliance Impact

The vulnerability involves an out-of-bounds write and improper array index validation in Samsung TizenFX, which could lead to memory corruption or unsafe access. This type of memory-safety issue may compromise data integrity and confidentiality, potentially violating requirements under GDPR (data protection) and HIPAA (health data security) if exploited.

Mitigation Strategies

Update Samsung TizenFX to the latest patched version immediately to address the out-of-bounds write and array index validation issues. Monitor official Samsung PSIRT advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85084. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart