CVE-2026-21096

A heap-based buffer overflow vulnerability in the JPEG decoder of libimagecodec.quram.so prior to the SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code, potentially compromising affected systems. Organizations utilizing this library should prioritize patching to mitigate the risk of exploitation, given the critical severity rating and potential for remote code execution.