CVE-2025-21075
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. This could lead to crashes or potential code execution.
Risk Assessment
A remote attacker could exploit the vulnerability to access sensitive data or execute malicious code, potentially taking control of the device. The risk affects devices with the vulnerable library.
Recommendation
Install the SMR Nov-2025 Release 1 or later update as soon as possible to fix the vulnerability. Also avoid processing untrusted image files until patched.
Other vulnerabilities in libimagecodec.quram.so
See all- CVE-2026-21096Critical
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
- CVE-2026-21095Critical
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
- CVE-2025-21043HighActively exploited
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. The vulnerability affects image processing within this library.
- CVE-2025-21042HighActively exploited
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. The vulnerability affects image processing within this library.
- CVE-2025-58479Medium
An out-of-bounds read exists in libimagecodec.quram.so prior to SMR Dec-2025 Release 1. A remote attacker can access out-of-bounds memory.
- CVE-2025-58478Medium
An out-of-bounds write exists in libimagecodec.quram.so prior to SMR Dec-2025 Release 1. A remote attacker can access out-of-bounds memory.
- CVE-2025-58477Medium
An out-of-bounds write exists in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1. A remote attacker can access out-of-bounds memory.
- CVE-2025-21074Medium
An out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. The vulnerability affects the image codec library.
- CVE-2025-21055Medium
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS