CVE-2026-21095

CriticalCVSS 9.2

Published: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Risk Assessment

Remote attacker could exploit the vulnerability to execute code in the context of the image handling process, potentially leading to system compromise.

Recommendation

Apply SMR Sep-2026 Release 1 to remediate the vulnerability.

Other vulnerabilities in libimagecodec.quram.so

CVE-2026-21096Critical
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Original NVD description (English source)

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.