Back to CVE Browser

CVE-2025-21042

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-09-12

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

Affected Platforms (CPE)

💻

Samsung

Android

= 13.0= 14.0= 15.0

References & Advisories

🔗 https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=04

🔗 https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21042

Related Vulnerabilities

CVE-2026-164047.4

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163976.5

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163737.5

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-159009.6

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandb...