Samsung Mobile Out-of-Bounds Write Vulnerability in DNG Format Parsing Allowing Memory Corruption

A vulnerability exists in the DNG format parsing of the library libimagecodec.media.quram.so, prior to the SMR July 2026 Release 1. This out-of-bounds write issue allows remote attackers to write to memory locations outside of the intended boundaries, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability causes a memory corruption issue by allowing out-of-bounds writes, which could be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can apply the Samsung July 2026 Security Maintenance Release, which includes a patch for this vulnerability. This update is available for major flagship models.