Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-24806 EUVD-2026-4758GHSA-8623-9fwr-4cxv

Buffer Write Security Vulnerability in liuyueyi/quick-media

Published Jan 27, 2026 · Updated May 6, 2026 · Assigned by GovTech CSG

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.

This issue affects quick-media: before v1.0.

Affected products

VendorProductAffectedFixed
liuyueyi quick-media — —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.github.liuyueyi.media:batik-codec-fix <= 3.0.0 — GHSA-8623-9fwr-4cxv

References