CVE-2026-24806: Liuyueyi Quick-Media

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java. This issue affects quick-media: before v1.0.

Affected products

• Liuyueyi Quick-Media

Published 2026-01-27. Last modified 2026-06-17.