CVE-2026-21096

CriticalCVSS 9.2

Published: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Risk Assessment

Remote attacker could take control of the image processing process, potentially leading to data confidentiality and integrity breaches.

Recommendation

Apply SMR Sep-2026 Release 1 to remediate the vulnerability.

Other vulnerabilities in libimagecodec.quram.so

CVE-2026-21095Critical
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Original NVD description (English source)

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.