Samsung Patches Actively Exploited Zero-Day Vulnerability CVE-2025-21043 in Android Devices
7 sources · Updated 4mo ago · First seen Sep 15, 2025
Samsung has released a security update to address CVE-2025-21043, a critical remote code execution vulnerability exploited in zero-day attacks against Android 13+ devices. The flaw, found in the closed-source image parsing library libimagecodec.quram.so, allows remote attackers to execute arbitrary code via specially crafted image files. Security experts urge immediate patching and enhanced mobile threat detection due to the active exploitation and potential for rapid spread.
Do you run this?See affected versions and whether adversaries are exploiting it against assets like yours.
Check your exposure
