Update your Samsung phone ASAP to patch this zero-day flaw exploited in the wild

Follow ZDNET: Add us as a preferred source on Google. Samsung has issued a patch to resolve a critical vulnerability impacting its Android smartphone users. All impacted phone models will receive the fix, which patches a vulnerability tracked as CVE-2025-21043. The security flaw, issued a critical base score of 8.8 by Samsung Mobile (a CNA), is described as an "out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code." Also: Your Android phone's most powerful security feature is hidden and off by default - turn it on now The critical vulnerability was privately disclosed by Meta and WhatsApp security teams on August 13, 2025. The South Korean tech giant was also informed that an exploit for this bug exists in the wild. Samsung's September security advisory states that CVE-2025-21043 impacts Android 13, 14, 15, and 16, the latter being the latest version of the operating system. While a full list of impacted handset models has not been released, smartphones running unpatched versions of Android will likely be vulnerable to the exploit, which could allow attackers to execute malicious code on a vulnerable handset. Developed by Quramsoft, libimagecodec.quram.so is an image parsing library used by apps to parse and decode image formats on Samsung devices. This isn't the first time a security issue has impacted image-related software on Samsung handsets, as with CVE-2020-8899, in which an unauthenticated attack...