Samsung’s September 2025 security updates for Android devices include a patch for a vulnerability that has been exploited in the wild.
The exploited bug, tracked as CVE-2025-21043 (CVSS score of 8.8), is described as an out-of-bounds write issue in the libimagecodec.quram.so image parsing library, which is used by applications that process images on Samsung devices.
According to Samsung, successful exploitation of the security defect allows remote attackers to execute arbitrary code on vulnerable devices.
https://www.securityweek.com/samsung-pa ... oid-users/