Samsung Mobile Out-of-Bounds Read Vulnerability in libimagecodec.quram.so Allowing Memory Access

A vulnerability allowing out-of-bounds read has been identified in the library libimagecodec.quram.so, in versions prior to the January 2026 Release 1. This vulnerability allows remote attackers to access out-of-bounds memory, potentially leading to unauthorized information disclosure or other memory-related issues.

Impact

Exploitation of this vulnerability could lead to unauthorized access to out-of-bounds memory, which may be exploited to read sensitive information or cause a denial-of-service condition.

Remediation

Users can apply the January 2026 Security Maintenance Release, which includes a patch for this vulnerability. Details on how to obtain this update can be found on the Samsung Mobile Security Update page.