CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-21042+1 related CVE | Out-of-Bounds Write RCE in Samsung Mobile Image Codec (libimagecodec.quram.so) | 9.8 | 36% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
CISA has added CVE-2025-21042, a vulnerability affecting Samsung mobile devices, to its Known Exploited Vulnerabilities (KEV) catalog, and has ordered US federal civilian agencies to address it by the start of December. “This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise,” the Cybersecurity and Infrastructure Security Agency noted .
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.