CVE-2025-21075

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Nov 5, 2025

CISA due date

—

The record

Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.

Ecosystem	Package	Introduced	Fixed