CVE-2026-20973
- Source
- https://cve.org/CVERecord?id=CVE-2026-20973
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-20973.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-20973
- Published
- 2026-01-09T07:16:03.817Z
- Modified
- 2026-03-13T03:55:56.230982Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.
- References
Affected packages
Git /
Database specific
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-apr\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-apr\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-apr\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-apr\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-aug\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-aug\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-aug\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-aug\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-dec\\-2021\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-dec\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-dec\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-dec\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-dec\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-feb\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-feb\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-feb\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-feb\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jan\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jan\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jan\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jan\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jul\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jul\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jul\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jul\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jun\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jun\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jun\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-jun\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-mar\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-mar\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-mar\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-mar\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-may\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-may\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-may\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-may\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-nov\\-2021\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-nov\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-nov\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-nov\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-nov\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-oct\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-oct\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-oct\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-oct\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-sep\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-sep\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-sep\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.0-smr\\-sep\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-apr\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-apr\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-apr\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-apr\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-aug\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-aug\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-aug\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-aug\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-dec\\-2021\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-dec\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-dec\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-dec\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-dec\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-feb\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-feb\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-feb\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-feb\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jan\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jan\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jan\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jan\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jul\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jul\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jul\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jul\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jun\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jun\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jun\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-jun\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-mar\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-mar\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-mar\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-mar\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-may\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-may\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-may\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-may\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-nov\\-2021\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-nov\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-nov\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-nov\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-nov\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-oct\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-oct\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-oct\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-oct\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-sep\\-2022\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-sep\\-2023\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-sep\\-2024\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.0-smr\\-sep\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-apr\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-aug\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-dec\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-feb\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-jul\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-jun\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-mar\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-may\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-nov\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-oct\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0-smr\\-sep\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0-smr\\-aug\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0-smr\\-dec\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0-smr\\-nov\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0-smr\\-oct\\-2025\\-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0-smr\\-sep\\-2025\\-r1"
}
]
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-20973.json"