Samsung has launched its month-to-month safety updates for Android, together with a repair for a safety vulnerability that it stated has been exploited in zero-day assaults.
The vulnerability, CVE-2025-21043 (CVSS rating: 8.8), issues an out-of-bounds write that might lead to arbitrary code execution.
“Out-of-bounds Write in libimagecodec.quram.so previous to SMR Sep-2025 Launch 1 permits distant attackers to execute arbitrary code,” Samsung stated in an advisory. “The patch fastened the wrong implementation.”
Based on a 2020 report from Google Undertaking Zero, libimagecodec.quram.so is a closed-source picture parsing library developed by Quramsoft that implements assist for numerous picture codecs.
The critical-rated concern, per the South Korean electronics big, impacts Android variations 13, 14, 15, and 16. The vulnerability was privately disclosed to the corporate on August 13, 2025.
Samsung didn’t share any specifics on how the vulnerability is being exploited in assaults and who could also be behind these efforts. Nonetheless, it acknowledged that “an exploit for this concern has existed within the wild.”
The event comes shortly after Google stated it resolved two safety flaws in Android (CVE-2025-38352 and CVE-2025-48543) that it stated have been exploited in focused assaults.
Elevate your perspective with NextTech Information, the place innovation meets perception.
Uncover the newest breakthroughs, get unique updates, and join with a worldwide community of future-focused thinkers.
Unlock tomorrow’s traits right this moment: learn extra, subscribe to our e-newsletter, and turn out to be a part of the NextTech neighborhood at NextTech-news.com
