Vulnerability Details CVE-2026-21095
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 38.4%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-21095
-
cpe:2.3:o:samsung:android:14.0
-
cpe:2.3:o:samsung:android:15.0
-
cpe:2.3:o:samsung:android:16.0
-
cpe:2.3:o:samsung:android:17.0