This vulnerability (CVE-2026-21045) is an out-of-bounds write issue classified under CWE-787, affecting the TIFF format parser in the library libimagecodec.media.quram.so on Samsung Mobile Devices. The flaw exists in versions before the SMR Jul-2026 Release 1. It allows remote attackers to write beyond allocated memory during TIFF parsing, which can cause memory corruption. The CVSS 4.0 base score is 8.4, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity. No official remediation level or patch information is currently provided by the vendor.

Successful exploitation can lead to out-of-bounds memory writes, which may cause memory corruption and potentially allow an attacker to alter device behavior or crash the system. The vulnerability is remotely exploitable without privileges or user interaction, increasing its risk. However, no known exploits are reported in the wild as of now.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or update is released by Samsung Mobile, users should exercise caution when handling untrusted TIFF files. Monitor Samsung Mobile's security advisories for updates regarding patches or mitigations.