CVE-2026-21045

None

CVSS

—

EPSS

—

Published

Jul 10, 2026

CISA due date

—

The record

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

Affected packages

Ecosystem	Package	Introduced	Fixed