CVE-2025-21043

HIGH KEV

Samsung Android - Out-of-bounds Write in libimagecodec.quram.so

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-21043 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 2, 2025.

Description

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0491
EPSS Percentile 89.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable no
Technical Impact total

Details

CISA KEV 2025-10-02
VulnCheck KEV 2025-09-12
ENISA EUVD EUVD-2025-29028
CWE
CWE-787
Status published
Products (2)
samsung/android 13.0 (47 CPE variants)
samsung/android 14.0 (3 CPE variants)
Published Sep 12, 2025
KEV Added Oct 02, 2025
Tracked Since Feb 18, 2026