The vulnerability resides in Samsung’s libimagecodec.media.quram.so library, which processes DNG image files. When a malformed DNG file is parsed, the library writes outside the bounds of a memory buffer. This out-of-bounds write can corrupt adjacent memory, potentially causing application crashes or memory corruption. The description does not indicate additional capabilities such as privilege escalation; the impact is limited to memory corruption.

The flaw affects any Samsung mobile device that includes the unpatched libimagecodec.media.quram.so prior to the SMR Jul‑2026 Release 1 update. No device models or OS versions are specifically listed, so all devices that incorporate the affected library before the update are at risk.

The CVSS score of 8.4 classifies the issue as high severity. The EPSS score is below 1 %, indicating a low likelihood of exploitation at the time of assessment. The vulnerability is not present in the CISA KEV catalog. It is inferred that an attacker could supply a malicious DNG file to the vulnerable library via any medium that delivers files to the device, such as email attachments or messaging apps. However, the description does not provide explicit details about the exact attack vector, so this inference remains just that—a reasonable assumption based on how image files can be delivered.