CVE-2026-24806

UNKNOWN 0.0

Buffer Write Security Vulnerability in liuyueyi/quick-media

CVSS Score

0.0

EPSS Score

0.1%

EPSS Percentile

21th

Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java. This issue affects quick-media: before v1.0.

CWE	CWE-94
Vendor	liuyueyi
Product	quick-media
Published	Jan 27, 2026
Last Updated	May 6, 2026

Stay Ahead of the Next One

Get instant alerts for liuyueyi quick-media

Be the first to know when new unknown vulnerabilities affecting liuyueyi quick-media are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

liuyueyi / quick-media

0 < v1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/liuyueyi/quick-media/pull/122 github.com: https://github.com/liuyueyi/quick-media/pull/122#issuecomment-4305453193 github.com: https://github.com/css4j/echosvg/discussions/137 github.com: https://github.com/github/advisory-database/pull/7437

Credits

🔍 TITAN Team ([email protected])