CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
CISA has added a critical zero-day vulnerability affecting Samsung mobile devices to its Known Exploited Vulnerabilities catalog. Warning that threat actors are actively exploiting the flaw in real-world attacks.<\/p>\n
The vulnerability, tracked as\u00a0CVE-2025-21042<\/a>, is an out-of-bounds write vulnerability in the libimagecodec.quram.so library on Samsung mobile devices.<\/p>\n This security flaw allows remote attackers to execute arbitrary code on vulnerable devices<\/a> without user interaction, making it particularly dangerous and prone to widespread exploitation.<\/p>\n The vulnerability is classified under CWE-787, which represents out-of-bounds write<\/a> flaws that can lead to memory corruption and unauthorized code execution.<\/p>\n The CISA researchers have confirmed that attackers are leveraging this zero-day<\/a> to compromise Samsung smartphones. However, specific details about the attack campaigns remain limited.<\/p>\n CISA\u2019s<\/a> decision to add CVE-2025-21042 to the KEV catalog on November 10, 2025, signals that federal agencies have confirmed active exploitation attempts targeting this vulnerability.<\/p>\n While it remains unknown whether the flaw has been weaponized in ransomware campaigns, the remote code execution capability poses significant risks to both individual users and enterprise environments.<\/p>\nSamsung 0-Day RCE Vulnerability Exploited<\/strong><\/strong><\/h2>\n