5.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-24807

CVE-2026-24807: Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules). This vulnerability is associated with program files SeekableOutputStream.Java.

This issue affects all versions of quick-media. A patch is available: 3970e96

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-24807

CVE-2026-24807:

5.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
com.github.liuyueyi.media:batik-codec-fix	maven	<= 3.0.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch commit reveals a classic buffer overflow vulnerability in the SeekableOutputStream.java file. The write(byte[] b, int off, int len) method was directly passing user-controllable off and len parameters to the underlying file.write method without any validation. This flaw could be exploited by a specially crafted input, leading to a buffer overflow. The patch rectifies this by introducing boundary checks for the off and len parameters, ensuring they are within the valid range of the input byte array. The vulnerable function, org.apache.batik.ext.awt.image.codec.util.SeekableOutputStream.write, is the key indicator of this vulnerability being triggered in a runtime environment.

Vulnerable functions

org.apache.batik.ext.awt.image.codec.util.SeekableOutputStream.write

plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util/SeekableOutputStream.java

The `write` method in `SeekableOutputStream` is vulnerable to a buffer overflow. It directly uses the `off` and `len` parameters in `file.write(b, off, len)` without proper validation. An attacker could provide malicious inputs for `off` and `len`, causing a write operation outside the intended buffer's boundaries. The patch mitigates this by adding checks to ensure that `off` and `len` are within the valid bounds of the byte array `b`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.