Samsung Libimagecodec.quram.so Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability has been identified in libimagecodec.quram.so, in versions prior to the December 2025 Release 1. This vulnerability allows remote attackers to access out-of-bounds memory, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability could result in a heap-based buffer overflow, allowing remote attackers to access out-of-bounds memory. Such memory access could be exploited to execute arbitrary code or cause other unintended behavior in the application.

Remediation

Users can apply the December 2025 Security Maintenance Release (SMR) to address this vulnerability. This SMR package includes patches from both Google and Samsung. Instructions for updating can be found on the Samsung Mobile Security website.