Critical severityNVD Advisory· Published Sep 9, 2026

CVE-2026-21096

Description

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Affected products

Samsung Mobile/libimagecodec.quram.sollm-fuzzy
Range: < SMR Sep-2026 Release 1

Patches

Vulnerability mechanics

References

security.samsungmobile.com/securityUpdate.smsbnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000