Samsung released the latest September 2025 security update for the Galaxy ecosystem a while ago, and the company has already started expanding the update to even more Galaxy devices, starting with the Galaxy Z Fold 7 and Flip 7 and the Galaxy S23 series. Meanwhile, the latest patch brought a fix for a critical security vulnerability that has been spread remotely.
Actually, a strange yet critical security vulnerability that is allowing attackers to execute the codes on vulnerable devices remotely and thus, compromising users’ privacy when opening a specially crafted image.
At the same time, a report by Bleeping Computer via SammyGuru suggests that a security issue (CVE-2025-21043) seems to be affecting various Samsung Galaxy devices running Android 13, 14, 15, and even 16. The issue apparently exists in a “libimagecodec.quram.so” named library, and this is generally used for image processing.
Specifically, in August 2025, this security vulnerability was already reported to Samsung by Meta and WhatsApp’s security teams; however, Samsung has still not rectified it and made it clear whether the attacks targeted only WhatsApp users owning Samsung Galaxy models.
Well, WhatsApp has urged the users who are potentially impacted by this exploit to just keep their Android devices updated to the latest version and reset the device to factory settings. Nevertheless, on the other hand, Samsung has also advised users to download the latest September 2025 security patch on their respective devices and be very careful when sending files or images to unauthorized sources.
