CVE-2025-21043

Name of the Vulnerable Software and Affected Versions Samsung devices versions Android 13 through 16

Description A critical out-of-bounds write vulnerability exists in the libimagecodec.quram.so library, potentially allowing remote attackers to execute arbitrary code on vulnerable devices. This flaw was actively exploited in attacks, with reports indicating exploitation via malicious images, potentially through messaging applications like WhatsApp. The vulnerability was reported by Meta and WhatsApp security teams and has been addressed in the September 2025 security update. The vulnerability affects Samsung Galaxy devices and has been exploited in the wild.

Recommendations Install the September 2025 security update on all affected devices.