Exploit / PoCcriticalExploited in the wild

Samsung fixed actively exploited zero

Security Affairsby @securityaffairsSep 12, 2025 · 11:44 UTC (Sep 12, 2025)1 min read2 · 2 reads

Read at securityaffairs.com

Analyze CVE-2025-21043 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-21043 CVE-2025-55177 CVE-2025-43300

Tags: cve-2025-21043 cve-2025-55177 cve-2025-43300 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-21043	Out-of-Bounds Write RCE in Samsung Mobile Image Codec (libimagecodec.quram.so)	9.8	2%	KEV	Sep 12, 2025 KEV Oct 2, 2025
CVE-2025-43300	Actively Exploited Out-of-Bounds Write in Apple iOS/iPadOS/macOS Image I/O	10.0	65%	KEVPoC	Aug 21, 2025 KEV Aug 21, 2025
CVE-2025-55177	Incorrect Authorization in WhatsApp Linked-Device Sync Used in Targeted Spyware Attacks	5.4	14%	KEV	Aug 29, 2025 KEV Sep 2, 2025

From the original article

1 min read at securityaffairs.com

Samsung fixed the remote code execution flaw CVE-2025-21043 that was exploited in zero-day attacks against Android devices. Samsung addressed the remote code execution vulnerability, tracked as CVE-2025-21043, that was exploited in zero-day attacks against Android users. The vulnerability is an out-of-bounds Write in libimagecodec.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.