PT-2025-48595 · Qualcomm · Libimagecodec.Quram.So

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-58477

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libimagecodec.quram.so versions prior to SMR Dec-2025 Release 1

Description An out-of-bounds write issue exists in the parsing of IFD tags. This can allow remote attackers to access memory outside of the intended boundaries. The issue is present in libimagecodec.quram.so.

Recommendations Update libimagecodec.quram.so to SMR Dec-2025 Release 1 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-58477

Affected Products

Libimagecodec.Quram.So

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58477 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58477 · Vendor Advisory
• https://twitter.com/CVEnew/status/1995688563971616959 · Twitter Post