CVE-2025-21043

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 4 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

4.91%

probability

This CVE has a 4.91% probability of being exploited in the next 30 days.

0% Top 89.7th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

OOB write in libimagecodec.quram.so

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Google Project Zero

Patched

Sept. 12, 2025

Reported by

Meta and WhatsApp Security Teams

Root Cause Analysis

???

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

TheHackerNews

CISA orders feds to patch Samsung zero-day used in spyware attacks

BleepingComputer Nov 10, 2025

Samsung patches actively exploited zero-day reported by WhatsApp

BleepingComputer Sep 12, 2025

Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks

TheHackerNews

Signal Intelligence

Confidenceⓘ

92%

EPSS 4.91%

Mentions 4

Last Seen Nov 10, 2025

CNA Information

Analyst Note

CVE-2025-21043 demonstrates strong confirmation indicators including a HIGH CVSS score (8.8), active exploitation in real-world spyware attacks, reporting by credible sources (Google Project Zero, WhatsApp, CISA), and official Samsung patches already released. The out-of-bounds write vulnerability in a core image codec library with remote code execution capability represents a critical threat actively leveraged by threat actors.