CVE-2025-21043

9.8

CRITICAL CVSS 3.1

Samsung Mobile Devices Out-of-Bounds Write Vulnerability - [Actively Exploited]

Description

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

INFO

Published Date :

Sept. 12, 2025, 8:15 a.m.

Last Modified :

Oct. 3, 2025, 1 a.m.

Remotely Exploit :

Yes !

Source :

[email protected]

CISA Notification

CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Due Date: Oct 23, 2025 | 11 days left

Alert Date: Oct 02, 2025 | 9 days ago

Description :

Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.

Required Action :

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes :

https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21043

Affected Products

The following products are affected by CVE-2025-21043 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product	Action
1	Samsung	android

: Total Affected Vendor : 1 | Products : 1

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Version	Severity	Source
CVSS 3.1	HIGH	3af57064-a867-422c-b2ad-40307b65c458
CVSS 3.1	HIGH	[email protected]
CVSS 3.1	CRITICAL	[email protected]

Solution

Apply the security update to fix the out-of-bounds write vulnerability.

Install the SMR Sep-2025 Release 1 security update.
Update libimagecodec.quram.so to the patched version.

Public PoC/Exploit Available at Github

CVE-2025-21043 has a 1 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-21043.

URL	Resource
https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09	Vendor Advisory

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-21043 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-21043 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

patrickmgarrity/threatcon1-lab

ThreatCon1 Lab

Python

Updated: 2 weeks, 5 days ago

1 stars 0 fork 0 watcher

Born at : Sept. 16, 2025, 2:32 p.m. This repo has been linked 6 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-21043 vulnerability anywhere in the article.

TheCyberThrone

CISA KEV Catalog Update October 2025 – Part I

October 3, 2025CISA recently updated its Known Exploited Vulnerabilities (KEV) catalog with critical vulnerabilities across GNU Bash, Juniper, Samsung, Jenkins, and Meteobridge products as follows:GNU ...

Published Date: Oct 03, 2025 (1 week, 1 day ago)

The Hacker News

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

Oct 03, 2025Ravie LakshmananVulnerability / IoT Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw impacting Smartbedded Meteob ...

Published Date: Oct 03, 2025 (1 week, 1 day ago)

CybersecurityNews

WhatsApp 0-Click Vulnerability Exploited Using Malicious DNG File

Security researchers detailed a zero-click remote code execution (RCE) vulnerability affecting WhatsApp on Apple’s iOS, macOS, and iPadOS platforms. The attack chain exploits two distinct vulnerabilit ...

Published Date: Sep 29, 2025 (1 week, 5 days ago)

Daily CyberSecurity

Two WordPress Core Vulnerabilities Disclosed Without Patch: Sensitive Data Exposure and Stored XSS

Two vulnerabilities were found in WordPress Core, affecting all versions up to and including 6.8.2. Both flaws were accidentally made public by a third-party before patches were available, though the ...