CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74636

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2026-21095: Heap-based Buffer Overflow

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

PT-2026-88829

📊 TECH SCORECARD | Sept 13-14, 2026 🔥 🍎 APPLE 🎉 iOS 27 SHIPS TODAY — Apple's biggest software release of the year, finally bringing the rebuilt Siri AI to iPhone, alongside macOS 27 Golden Gate, watchOS 27, tvOS 27 and visionOS 27 ⚠️ Fine print worth knowing: Siri AI arrives as a beta with daily...

📄 Samsung QuramDNG Type Confusion Detector Vulnerability Scanner

This C++ scanner analyzes DNG Digital Negative files for the CVE-2025-58478 type confusion vulnerability in the libimagecodec.quram.so library used on Samsung devices...

📄 Samsung Quram DNG Heap Corruption

Samsung devices utilize Quram's DNG decoder. A malformed ScalePerColumn opcode with oversized areaSpec and extreme pitches leads to arithmetic overflow in the per-column scaling loop. After allocation miscalculation, subsequent writes corrupt heap structures. Carefully crafted payloads enable...

DEBIAN-CVE-2020-35533

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

UBUNTU-CVE-2020-35533

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

librawspeed:TiffDecoderFuzzer-DngDecoder: Use-after-poison in rawspeed::DngOpcodes::LookupOpcode::apply

Project: https://github.com/darktable-org/rawspeed.git Detailed Report: https://oss-fuzz.com/testcase?key=5118943375261696 Project: librawspeed Fuzzing Engine: afl Fuzz Target: TiffDecoderFuzzer-DngDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash Type: Use-after-poison READ 2 Crash...