CVE-2025-21043
ENISA EUVD: EUVD-2025-29028 ↗
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
4 articles
Published: 2025-09-12
EPSS Score
Source: FIRST.org · 2026-05-23
4.91%
probability
This CVE has a 4.91% probability
of being exploited in the next 30 days.
0%
Top 89.7th percentile of all CVEs
100%
CVSS v3.1
Source: VulnerabilityLookup (CIRCL)8.8
HIGH
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
VulnerabilityLookup (CNA)Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Affected Products
Samsung Mobile
Samsung Mobile Devices
SMR Sep-2025 Release in Android 13, 14, 15, 16
Attack Intelligence
Google Project Zero
Patched
Sept. 12, 2025
Reported by
Meta and WhatsApp Security Teams
Root Cause Analysis
???
Signal Intelligence
Confidence
92%
EPSS
4.91%
CVSS v3.1
8.8
Mentions
4
Last Seen
Nov 10, 2025
CNA Information
CNA Assigner
SamsungMobile
Analyst Note
CVE-2025-21043 demonstrates strong confirmation indicators including a HIGH CVSS score (8.8), active exploitation in real-world spyware attacks, reporting by credible sources (Google Project Zero, WhatsApp, CISA), and official Samsung patches already released. The out-of-bounds write vulnerability in a core image codec library with remote code execution capability represents a critical threat actively leveraged by threat actors.
Threat Actors 11
Cobalt
apt_group
Financial crime
🇷🇺 RU
APT 28
apt_group
Information theft and espionage
🇷🇺 RU
Hacking Team
apt_group
🇮🇹 IT
Infy
apt_group
Information theft and espionage
🇮🇷 IR
APT 22
apt_group
Information theft and espionage
🇨🇳 CN
APT 6
apt_group
Information theft and espionage
🇨🇳 CN
Stealth Falcon
apt_group
Information theft and espionage
🇦🇪 AE
Circles
apt_group
Global
Shadow Network
apt_group
Information theft and espionage
🇨🇳 CN
Mana Team
apt_group
🇨🇳 CN
Storm-2460
apt_group
🇷🇺 RU
Triage Info
Decided atMar 03, 2026
Published DateSep 12, 2025