Samsung’s September 2025 Android security updates addressed a critical out-of-bounds write flaw in the libimagecodec.quram.so image parsing library affecting Android 13–16 devices, which was exploited in the wild to achieve remote code execution (RCE). The vulnerability, tracked as CVE-2025-21043 (CVSS 8.8/10), privately reported on August 13, 2025, by Meta and WhatsApp security teams, appears linked to a broader spyware campaign that also leveraged Apple’s CVE-2025-43300 and WhatsApp’s CVE-2025-55177 in highly targeted attacks. While Samsung has withheld technical details, industry analysts believe CVE-2025-21043 could have been chained with the WhatsApp bug to compromise Samsung Android devices, mirroring similar exploits on iOS. WhatsApp confirmed fewer than 200 victims (primarily journalists, civil society figures, and human rights defenders) had been notified, while Amnesty International warned that both iPhone and Android users were affected by zero-click exploits attributed to commercial surveillanceware vendors. This incident underscores how OS-level image parsing flaws across major mobile platforms are being systematically weaponized in sophisticated, cross-ecosystem spyware operations. CTIX analysts urge all readers to ensure their mobile devices are up to date with the most recent security update.