RCE in Liuyueyi Quick-Media
CVE-2026-24806
Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java. This issue affects quick-media: before v1.0.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.004 (32.8th percentile) — read the EPSS interpretation.
Affected products
- Liuyueyi Quick-media — versions 0