CVE-2026-24806

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-24806", "assignerOrgId": "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", "state": "PUBLISHED", "assignerShortName": "GovTech CSG", "dateReserved": "2026-01-27T08:39:10.281Z", "datePublished": "2026-01-27T08:42:04.802Z", "dateUpdated": "2026-05-06T17:01:25.546Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/liuyueyi/quick-media", "defaultStatus": "unaffected", "modules": ["plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png"], "product": "quick-media", "programFiles": ["PNGImageEncoder.java"], "vendor": "liuyueyi", "versions": [{"lessThan": "v1.0", "status": "affected", "version": "0", "versionType": "git"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "TITAN Team (titancaproject@gmail.com)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules).<p> This vulnerability is associated with program files <tt>PNGImageEncoder.Java</tt>.</p><p>This issue affects quick-media: before v1.0.</p>"}], "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.\n\nThis issue affects quick-media: before v1.0."}], "metrics": [{"cvssV4_0": {"Automatable": "YES", "Recovery": "USER", "Safety": "NEGLIGIBLE", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 5.3, "baseSeverity": "MEDIUM", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", "shortName": "GovTech CSG", "dateUpdated": "2026-01-27T08:43:10.336Z"}, "references": [{"tags": ["patch"], "url": "https://github.com/liuyueyi/quick-media/pull/122"}], "source": {"discovery": "UNKNOWN"}, "title": "Buffer Write Security Vulnerability in liuyueyi/quick-media", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-27T20:46:19.646365Z", "id": "CVE-2026-24806", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T20:46:45.526Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-06T17:01:25.546Z"}, "references": [{"url": "https://github.com/liuyueyi/quick-media/pull/122#issuecomment-4305453193"}, {"url": "https://github.com/css4j/echosvg/discussions/137"}, {"url": "https://github.com/github/advisory-database/pull/7437"}], "title": "CVE Program Container", "x_generator": {"engine": "ADPogram 0.0.1"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/liuyueyi/quick-media/pull/122#issuecomment-4305453193"}, {"url": "https://github.com/css4j/echosvg/discussions/137"}, {"url": "https://github.com/github/advisory-database/pull/7437"}], "x_generator": {"engine": "ADPogram 0.0.1"}, "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-06T17:01:25.546Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-24806", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-27T20:46:19.646365Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T20:46:35.888Z"}}], "cna": {"title": "Buffer Write Security Vulnerability in liuyueyi/quick-media", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "TITAN Team (titancaproject@gmail.com)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "USER", "baseScore": 5.3, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:M/U:Amber", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "AMBER", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "liuyueyi", "modules": ["plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png"], "product": "quick-media", "versions": [{"status": "affected", "version": "0", "lessThan": "v1.0", "versionType": "git"}], "programFiles": ["PNGImageEncoder.java"], "collectionURL": "https://github.com/liuyueyi/quick-media", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/liuyueyi/quick-media/pull/122", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.\n\nThis issue affects quick-media: before v1.0.", "supportingMedia": [{"type": "text/html", "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules).<p> This vulnerability is associated with program files <tt>PNGImageEncoder.Java</tt>.</p><p>This issue affects quick-media: before v1.0.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", "shortName": "GovTech CSG", "dateUpdated": "2026-01-27T08:43:10.336Z"}}}, "cveMetadata": {"cveId": "CVE-2026-24806", "state": "PUBLISHED", "dateUpdated": "2026-05-06T17:01:25.546Z", "dateReserved": "2026-01-27T08:39:10.281Z", "assignerOrgId": "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", "datePublished": "2026-01-27T08:42:04.802Z", "assignerShortName": "GovTech CSG"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/liuyueyi/quick-media", "defaultStatus": "unaffected", "modules": ["plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png"], "product": "quick-media", "programFiles": ["PNGImageEncoder.java"], "vendor": "liuyueyi", "versions": [{"lessThan": "v1.0", "status": "affected", "version": "0", "versionType": "git"}]}], "source": "cve_disclosure@tech.gov.sg"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.\n\nThis issue affects quick-media: before v1.0."}, {"lang": "es", "value": "Vulnerabilidad de Control Inadecuado de Generaci\u00f3n de C\u00f3digo ('Inyecci\u00f3n de C\u00f3digo') en liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png m\u00f3dulos). Esta vulnerabilidad est\u00e1 asociada con los archivos de programa PNGImageEncoder.Java.\n\nEste problema afecta a quick-media: antes de la v1.0."}], "id": "CVE-2026-24806", "lastModified": "2026-06-17T10:23:37.430", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "USER", "Safety": "NEGLIGIBLE", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "cve_disclosure@tech.gov.sg", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24806", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-27T20:46:19.646365Z", "version": "2.0.3"}}]}, "published": "2026-01-27T09:15:50.743", "references": [{"source": "cve_disclosure@tech.gov.sg", "url": "https://github.com/liuyueyi/quick-media/pull/122"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/css4j/echosvg/discussions/137"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/github/advisory-database/pull/7437"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/liuyueyi/quick-media/pull/122#issuecomment-4305453193"}], "sourceIdentifier": "cve_disclosure@tech.gov.sg", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "cve_disclosure@tech.gov.sg", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T02:24:23.485159+00:00", "value": {"mitigation_remediation": ["Upgrade to quick\u2011media version 1.0 or later once a patched release is available.", "Disable or restrict the SVG plugin and batik\u2011codec\u2011fix component if they are not required for your deployment.", "Validate all PNG input files and process them in a protected, sandboxed environment to mitigate potential code injection.", "Monitor system logs for anomalous PNG processing activity that could indicate an attempt to exploit the vulnerability."], "summary": {"action": "Assess Impact", "impact": "Code Execution via Code Injection"}, "threat_synthesis": {"affected_systems": "The flaw affects the liuyueyi quick\u2011media application prior to version\u202f1.0. No later releases have been listed as mitigated, and the product is identified only for the packages that contain the batik\u2011codec\u2011fix PNG modules.", "description_and_impact": "The reported weakness is an improper control of code generation in the PNGImageEncoder module of the quick\u2011media application, which can allow an attacker to inject arbitrary code when processing crafted PNG files. The vulnerability, identified as CWE\u201194, could lead to execution of attacker supplied code, compromising confidentiality, integrity, and availability of the affected system. No evidence is provided that the flaw allows a denial\u2011of\u2011service attack, but code execution would immediately raise the stakes for the application.", "risk_and_exploitability": "The CVSS score of 5.3 indicates a moderate severity, while the EPSS score of less than 1\u202f% signals a low current likelihood of exploitation. The vulnerability is not in the CISA KEV catalogue. The likely attack vector is the processing of malicious PNG images through the plugin; an attacker would need to supply such a file to the application, which may be feasible via local file handling or, if the application exposes a remote endpoint for image uploads, remotely."}}}}, "created": "2026-01-27T20:16:55.742120+00:00", "updated": "2026-04-18T02:30:15.866449+00:00", "vendors": ["liuyueyi", "liuyueyi$PRODUCT$quick-media"]}