Your Samsung phone could be hacked by a photo: Patch rolling out

Being a Samsung user, it’s highly needed to update to the September 2025 security patch to address the critical zero-day vulnerability. With the latest SMR, the company has fixed a remote code execution vulnerability.

This zero-day vulnerability was exploited in zero-day attacks targeting Samsung phones. The flaw affects millions of devices running One UI 8, 7, 6, and 5. Security teams of Meta and WhatsApp reported this security flaw last month.

Samsung has addressed CVE-2025-21043, considering it SVE-2025-1702. The affected versions are Android 13 to Android 16. The flaw out-of-bounds write in libimagecodec.quram.so allows remote attackers to execute arbitrary code.

“Out-of-bounds Write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code,” Samsung says. “Samsung was notified that an exploit for this issue has existed in the wild.”

Samsung did not confirm whether the SVE targets just WhatsApp users or other messaging apps, too. It’s worth noting that the CVE-2025-21043 exploit targets messengers that use the vulnerable image parsing library.

“As part of our proactive investigation into a highly targeted exploit over the summer (which resulted in our security advisory for iOS/MacOS WhatsApp users), we shared our findings with our industry peers, including Apple and Samsung,” a Meta spokesperson told BleepingComputer.

That said, Samsung has started rolling out its September 2025 security patch. The company shared detailed patch notes earlier this month, fixing around 100 issues. The updated rollout plan was also disclosed for all Galaxy users.

“Apple mitigated the relevant high-severity vulnerability (CVE-2025-43300) last month. Samsung also issued a patch for SVE-2025-1702 and published their security advisory this week.”

The post Your Samsung phone could be hacked by a photo: Patch rolling out appeared first on Sammy Fans.