CVE-2026-85084: CWE-787 Out-of-bounds Write in Samsung Open Source TizenFX

CVE-2026-85084 is a vulnerability in Samsung Open Source TizenFX involving an out-of-bounds write due to improper validation of array indices (CWE-787 and CWE-129). This can cause buffer overflow conditions that may impact the integrity and availability of the affected system. The CVSS 3.1 base score is 6.3 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H, indicating local attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but high impact on integrity and availability. There is no vendor advisory or patch information available at this time, and no known exploits have been reported.

The vulnerability allows an attacker with local access and low privileges to perform out-of-bounds writes, potentially leading to buffer overflow conditions that can compromise system integrity and availability. Confidentiality is not affected. The high attack complexity reduces the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users and monitor for unusual behavior related to TizenFX components.