CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Android libimagecodec.quram.so Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-21043) Urgent Security Advisory
[Affected Scope] Samsung Android mobile devices and the embedded libimagecodec.quram.so library prior to the SMR Sep-2025 Release 1 security patch
[Impact] Remote attackers can execute arbitrary code with high privileges without user interaction by tricking the system into processing a specially crafted image file
[Mitigation] Immediately apply the Samsung official software update (SMR Sep-2025 Release 1 or later) and restrict automatic downloading of media files from untrusted sources
Samsung Android libimagecodec.quram.so Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-21042) Urgent Security Advisory
[Affected Scope] Samsung Android mobile devices running security patch levels prior to SMR Apr-2025 Release 1
[Impact] Remote attackers can execute arbitrary code with high privileges and compromise the device without user interaction by triggering an out-of-bounds write during image decoding.
[Mitigation] Immediately apply the Samsung April 2025 Security Maintenance Release (SMR Apr-2025 Release 1) or later.
Google Chrome for Android UI Heap Buffer Overflow Sandbox Escape Vulnerability (CVE-2020-16010) Technical Advisory
[Affected Scope] Google Chrome for Android prior to version 86.0.4240.185
[Impact] A remote attacker who has compromised the renderer process can trigger a heap buffer overflow in the UI component via a crafted HTML page, potentially leading to a complete sandbox escape and arbitrary code execution on the target device
[Mitigation] Immediately update Google Chrome for Android to version 86.0.4240.185 or later via the Google Play Store