This vulnerability is a heap-based buffer overflow in the JPEG decoder library (libimagecodec.quram.so) used by Samsung Mobile Devices. It exists in all versions before the SMR Sep-2026 Release 1. Exploitation can lead to remote code execution with no privileges or user interaction required. The CVSS 4.0 vector indicates network attack vector, low attack complexity, and partial attack prerequisites. The vulnerability is classified under CWE-122 (Heap-based Buffer Overflow). No vendor advisory or patch information is currently available.

Successful exploitation allows remote attackers to execute arbitrary code on affected Samsung Mobile Devices, potentially leading to full compromise of the device. The vulnerability impacts confidentiality, integrity, and availability at a high level. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users and administrators should monitor Samsung Mobile's security advisories for updates and apply the SMR Sep-2026 Release 1 or later once available.