High Β· published September 12, 2025
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 98.4th percentile for exploit probability.
β‘ An out-of-bounds write in libimagecodec.quram.so could let remote attackers execute arbitrary code without breaking a sweat! π₯ Think of it like a delivery service that accidentally sends packages to the wrong address because of a mislabel β once the wrong package is in the hands of the wrong person, thereβs no telling what could happen! An attacker could take full control of the affected system, executing malicious code that could lead to data theft, system compromise, or even a full-blown takeover! This is a serious threat that can wreak havoc if not addressed immediately.
Think of it like a delivery service that accidentally sends packages to the wrong address because of a mislabel β once the wrong package is in the hands of the wrong person, thereβs no telling what could happen! This vulnerability allows attackers to exploit an out-of-bounds write within libimagecodec.quram.so, resulting in the potential execution of arbitrary code when processing certain inputs.
An attacker could take full control of the affected system, executing malicious code that could lead to data theft, system compromise, or even a full-blown takeover! This is a serious threat that can wreak havoc if not addressed immediately. To protect yourself, update libimagecodec to the SMR Apr-2025 Release 1 or later. Itβs also a good idea to review your systems for any unintended exposure to untrusted inputs that might exploit this flaw. You've got this! Just follow these steps and you'll lock this vulnerability down like a security pro. π‘οΈ
| Product | Versions | Fixed in |
|---|---|---|
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |
| samsung/android | all versions | β |