CVE-2025-21043

HIGH KEV

Samsung Android - Out-of-Bounds Write

Title source: rule

Description

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

References (2)

Scores

CVSS v3 8.8
EPSS 0.0491
EPSS Percentile 89.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2025-10-02
VulnCheck KEV 2025-09-12
ENISA EUVD EUVD-2025-29028
CWE
CWE-787
Status published
Products (2)
samsung/android 13.0 (47 CPE variants)
samsung/android 14.0 (3 CPE variants)
Published Sep 12, 2025
KEV Added Oct 02, 2025
Tracked Since Feb 18, 2026