CVE-2026-21095

A heap-based buffer overflow vulnerability in the DNG decoder of libimagecodec.quram.so prior to the SMR Sep-2026 Release 1 enables remote attackers to execute arbitrary code on affected systems. Organizations utilizing this library should prioritize patching to mitigate the risk of exploitation, given the critical severity rating of 9.2. Immediate action is essential for those managing applications that rely on this component to safeguard against potential remote attacks.