CVE-2026-24806 — Buffer Write Security Vulnerability in liuyueyi/quick-media
Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/…
Published: 2026-01-27 · CVSS: 5.3 · CVSS 4.0
Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java. This issue affects quick-media: before v1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7