critical9.8
CVE-2026-21095
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Impact
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Android | Versions 14.0, 15.0, 16.0, 17.0 |