This vulnerability (CVE-2026-21047) is an out-of-bounds write (CWE-787) in the ImsService of Samsung Mobile Devices. It affects device software versions before the SMR Jul-2026 Release 1. The vulnerability allows remote attackers to potentially execute arbitrary code, indicating a serious security risk. The CVSS 4.0 base score is 8.3, reflecting high severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and availability. No official patch or remediation level is currently stated, and no known exploits in the wild have been reported.

Successful exploitation could lead to remote code execution on affected Samsung Mobile Devices, potentially compromising device confidentiality and availability. The vulnerability does not require privileges or user interaction, increasing the risk of exploitation. However, no known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Samsung Mobile's security advisories for updates and apply the SMR Jul-2026 Release 1 or later once available.