Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Samsung Mobile Out-of-Bounds Write Vulnerability in libimagecodec.quram.so Allowing Remote Code Execution
Vulnerability
A critical out-of-bounds write vulnerability has been identified in the library libimagecodec.quram.so, affecting several different versions prior to the Samsung Security Maintenance Release (SMR) in April 2025. This vulnerability allows remote attackers to execute arbitrary code on the affected devices.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected device.
Remediation
Users can apply the April 2025 Security Maintenance Release (SMR) to address this vulnerability. This update is part of the monthly security update process and includes patches from both Google and Samsung.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.