CVE-2025-21043: high-severity vulnerability in Samsung Mobile Devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in the libimagecodec.quram.so library allows attackers to write data beyond the intended memory boundaries, potentially letting them run malicious code on affected devices. This vulnerability can be exploited remotely without requiring special access.
Out-of-bounds write vulnerability in libimagecodec.quram.so enables remote code execution through memory corruption. Attack vector is likely image processing; no authentication or user interaction prerequisites clearly stated. Impact is arbitrary code execution with the privileges of the affected process.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.