CVE-2026-21045

HighCVSS 8.3

Published: 10/07/2026(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows out-of-bounds write when parsing TIFF format. Remote attackers can exploit this to write out-of-bounds memory.

Risk Assessment

The risk involves potential remote code execution or system instability by sending a crafted TIFF file, which could compromise data integrity or service availability.

Recommendation

It is recommended to immediately update libimagecodec.media.quram.so to version SMR Jul-2026 Release 1 or later to eliminate the out-of-bounds write vulnerability.

Other vulnerabilities in libimagecodec.media.quram.so

CVE-2026-21048High
An out-of-bounds write vulnerability in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory while parsing DNG format.

Original NVD description (English source)

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.