Samsung Patches Zero-Day Exploited Against Android Users

Samsung’s September 2025 security updates for Android devices include a patch for a vulnerability that has been exploited in the wild. The exploited bug, tracked as CVE-2025-21043 (CVSS score 8.8), is described as an out-of-bounds write issue in the libimagecodec.quram.so image parsing library used by apps processing images on Samsung devices. According to Samsung, successful exploitation of the security defect allows remote attackers to execute arbitrary code on vulnerable devices.

The company notes that it was notified an exploit for this issue had existed in the wild, and credited the Meta and WhatsApp security teams for reporting it on 13 August. The timing and the fact the zero-day was in a core image library suggest it may have been exploited in attacks targeting WhatsApp users, with related discussions drawing parallels to a separate iOS/macOS/Apple vulnerability and its observed exploitation. Written by Ionut Arghire; 15 September 2025.