CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-12
Samsung Android libimagecodec.quram.so Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-21043) Urgent Security Advisory
[Affected Scope] Samsung Android mobile devices and the embedded libimagecodec.quram.so library prior to the SMR Sep-2025 Release 1 security patch
[Impact] Remote attackers can execute arbitrary code with high privileges without user interaction by tricking the system into processing a specially crafted image file
[Mitigation] Immediately apply the Samsung official software update (SMR Sep-2025 Release 1 or later) and restrict automatic downloading of media files from untrusted sources