CVE-2026-21048

HighCVSS 8.3

Published: 10/07/2026(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

An out-of-bounds write vulnerability in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory while parsing DNG format.

Risk Assessment

A remote attacker could exploit this vulnerability to execute arbitrary code or cause a system crash, compromising data confidentiality and availability.

Recommendation

Immediately update libimagecodec.media.quram.so to version SMR Jul-2026 Release 1 or later.

Other vulnerabilities in libimagecodec.media.quram.so

CVE-2026-21045High
A vulnerability in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows out-of-bounds write when parsing TIFF format. Remote attackers can exploit this to write out-of-bounds memory.

Original NVD description (English source)

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.