Samsung security flaw could let hackers remotely control your device — update your Galaxy phone right now
By Amber Bouman
Copyright tomsguide
Skip to main content
Tom’s Guide
Newsletters
View Profile
Search Tom’s Guide
You May Like
Samsung issues security warning for most Galaxy users to update their phones now — what you need to know
Google just fixed 84 Android security flaws including two actively exploited zero-days — update your phone right now
Google just fixed two high-severity Qualcomm bugs used by hackers in their attacks — update your Android phone right now
Phone Insights
Phone Best Picks
Phone Deals
Phone Face-Offs
Phone How-Tos
Phone Reviews
Network Carriers
Android Phones
Google Phones
Motorola Phones
OnePlus Phones
Samsung Phones
Nothing Phone
TV Best Picks
TV Face-Offs
Audio Insights
Audio Best Picks
Audio Deals
Audio Face-Offs
Audio How-Tos
Audio Reviews
Over-Ear Headphones
Bluetooth Speakers
Smart Speakers
TV & Audio Brands
Entertainment
Streaming Devices
Prime Video
Paramount Plus
PlayStation
Handheld Gaming
Gaming Peripherals
Connections
Computing Insights
Computing Best Picks
Computing Deals
Computing Face-Offs
Computing How-Tos
Computing News
Computing Reviews
VPN Best Picks
VPN Face-Offs
VPN How-Tos
VPN Reviews
Operating Systems
Identity Theft Protection
Parental Controls
Malware & Adware
Virtual Reality
Augmented Reality
Smart Glasses
Chromebooks
Gaming Laptops
Apple Desktops
Gaming Desktops
Android Tablets
Computing Brands
AI Insights
AI Best Picks
AI Face-Offs
Google Gemini
Apple Intelligence
Mattress Best Picks
Mattress Deals
Mattress Face-Offs
Mattress How-Tos
Mattress News
Mattress Reviews
Mattress Care
Mattress Toppers
Pillows & Bedding
Smartwatches
Fitness Trackers
Smart Rings
Apple Watch
Home Insights
Home Best Picks
Home Face-Offs
Home How-Tos
Home Reviews
Home Topics
Home Appliances
Home Office
Home Security
Home Brands
Popular Brands
View Phones
Phone Insights
Phone Best Picks
Phone Deals
Phone Face-Offs
Phone How-Tos
Phone Reviews
Network Carriers
View Network Carriers
Android Phones
View Android Phones
Google Phones
Motorola Phones
OnePlus Phones
Samsung Phones
Nothing Phone
TV Best Picks
TV Face-Offs
Audio Insights
View Audio Insights
Audio Best Picks
Audio Deals
Audio Face-Offs
Audio How-Tos
Audio Reviews
Headphones
View Headphones
Over-Ear Headphones
View Speakers
Bluetooth Speakers
Smart Speakers
TV & Audio Brands
Entertainment
View Entertainment
View Streaming
Streaming Devices
Prime Video
Paramount Plus
View Gaming
PlayStation
Handheld Gaming
Gaming Peripherals
Word Games
Connections
View Computing
Computing Insights
Computing Best Picks
Computing Deals
Computing Face-Offs
Computing How-Tos
Computing News
Computing Reviews
VPN Best Picks
VPN Face-Offs
VPN How-Tos
VPN Reviews
View Hardware
View Software
Operating Systems
View Security
Identity Theft Protection
Parental Controls
Malware & Adware
View VR & AR
Virtual Reality
Augmented Reality
Smart Glasses
View Laptops
Chromebooks
Gaming Laptops
View Desktops
Apple Desktops
Gaming Desktops
View Tablets
Android Tablets
Computing Brands
AI Insights
AI Best Picks
AI Face-Offs
AI Engines
Google Gemini
Apple Intelligence
View Wellness
Mattresses
View Mattresses
Mattress Best Picks
Mattress Deals
Mattress Face-Offs
Mattress How-Tos
Mattress News
Mattress Reviews
Mattress Care
Mattress Toppers
Pillows & Bedding
View Fitness
Smartwatches
Fitness Trackers
Smart Rings
Apple Watch
Home Insights
Home Best Picks
Home Face-Offs
Home How-Tos
Home Reviews
Home Topics
Home Appliances
Home Office
Home Security
View Outdoors
Home Brands
Popular Brands
Meta Connect LIVE
iPhone 17 Pro Max Review
iPhone Air Review
iPhone 17 Review
Best laptops
Best Mattress
Don’t miss these
Samsung Phones
Samsung issues security warning for most Galaxy users to update their phones now — what you need to know
Online Security
Google just fixed 84 Android security flaws including two actively exploited zero-days — update your phone right now
Online Security
Google just fixed two high-severity Qualcomm bugs used by hackers in their attacks — update your Android phone right now
iOS 18.6 fixes 24 security flaws — update your iPhone right now
Malware & Adware
More than 250 malicious apps are spreading info-stealing malware on Android and iOS — delete these right now
Malware & Adware
Dangerous Android banking trojan found lurking in malicious apps with 19 million installs — don’t fall for this
Malware & Adware
This Android malware poses as real apps to take you to dangerous sites and flood your phone with spam
Online Security
This new Android attack could trick you into compromising your own phone — everything you need to know
Malware & Adware
12 signs your phone has been hacked — and what to do next
Online Security
Microsoft just fixed over 107 flaws including one serious zero-day — update your PC right now
Malware & Adware
This spyware is stealing photos on iPhone and Android — protect yourself now
Online Security
The SharePoint flaw has now hit over 400 companies including a US nuclear administration
Online Security
Millions of Dell laptops at risk of attack due to security chip flaw — update your PC right now
Online Security
TP-Link router flaws lets botnets attack Microsoft 365 accounts — check yours now
Online Security
Microsoft releases emergency security updates to fix SharePoint zero-day flaws — everything you need to know
Online Security
Samsung security flaw could let hackers remotely control your device — update your Galaxy phone right now
Amber Bouman
17 September 2025
Flaw was reported last month but a fix is finally rolling out
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Tom’s Guide)
Samsung users should update their devices as soon as possible as the company’s latest update includes a fix for a flaw that could allow hackers to gain access to your phone to remotely install malicious code on it. As reported by PCMag, the flaw in question (tracked as CVE-2025-21043) was first discovered last month and Apple pushed out a patch for it to iOS users with its 18.6.2 update. Now though, Samsung phones are receiving their own fix as part of a wider security update.
Realistically, it it unlikely that most users would be targeted with this particular attack but given that this is a critical vulnerability, it’s important that all users update their phones to address the flaw. It’s always considered to be a good idea to keep an operating system up-to-date for this particular reason and at the same time, you want to careful about the apps that you download onto a phone.
Samsung’s notes on the security update state that “out-of-bounds Write in libimagecodec.quarm.so prior to SMR sept 2025 release 1 allows remote attackers to execute arbitrary code.” This basically means that there is an issue with a third party tool on Samsung devices used by messaging apps to look at images in a way that could allow hackers access.
You may like
Samsung issues security warning for most Galaxy users to update their phones now — what you need to know
Google just fixed 84 Android security flaws including two actively exploited zero-days — update your phone right now
Google just fixed two high-severity Qualcomm bugs used by hackers in their attacks — update your Android phone right now
WhatsApp’s security team first discovered the vulnerability, which may affect over 3 billion users worldwide, making it a particularly attractive target for attackers. Meta, in turn, reported the bug to both Apple and Samsung last month. While Samsung doesn’t mention any other affected messaging apps in the security notes, that makes it even more important to download the security update on your phone. This bug affects all Samsung handsets running Android 13 or later, and iOS users should make sure that they’re running iOS 18.6.2 or later in order to stay protected.
Follow Tom’s Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds. Make sure to click the Follow button!
More from Tom’s Guide
Google just took down 224 malicious apps with 38 million installs in massive SlopAds fraud campaign — how to stay safe
The TikTok ban saga appears to finally be over as reports suggest a deal has been done
Fake Meta suspension warnings used in new malware campaign — how to protect your devices and your data
Today’s best Bitdefender Mobile Security deals
Bitdefender Mobile Security
at Bitdefender
Sign up to get the BEST of Tom’s Guide direct to your inbox.
Get instant access to breaking news, the hottest reviews, great deals and helpful tips.
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
See more Computing News
Amber Bouman
Social Links Navigation
Senior Editor Security
Amber Bouman is the senior security editor at Tom’s Guide where she writes about antivirus software, home security, identity theft and more. She has long had an interest in personal security, both online and off, and also has an appreciation for martial arts and edged weapons. With over two decades of experience working in tech journalism, Amber has written for a number of publications including PC World, Maximum PC, Tech Hive, and Engadget covering everything from smartphones to smart breast pumps.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
Samsung issues security warning for most Galaxy users to update their phones now — what you need to know
Google just fixed 84 Android security flaws including two actively exploited zero-days — update your phone right now
Google just fixed two high-severity Qualcomm bugs used by hackers in their attacks — update your Android phone right now
iOS 18.6 fixes 24 security flaws — update your iPhone right now
More than 250 malicious apps are spreading info-stealing malware on Android and iOS — delete these right now
Dangerous Android banking trojan found lurking in malicious apps with 19 million installs — don’t fall for this
Latest in Online Security
Google just took down 224 malicious apps with 38 million installs in massive SlopAds fraud campaign — how to stay safe
Fake Meta suspension warnings used in new malware campaign — how to protect your devices and your data
I found a phishing email in my inbox and a malicious app in my news feed — here’s how I knew they were scams
Hackers are using Google search results to spread fake apps filled with malware — don’t fall for this
Skincare giant Clarins allegedly hit in data breach with 600,000 customers exposed — what you need to know
7 iPhone security settings you should enable right now to lock down your smartphone
Latest in News
Garmin launches Bounce 2 — new smartwatch for kids with LTE challenges Apple Watch SE 3
Samsung security flaw could let hackers remotely control your device — update your Galaxy phone right now
FDA warns that imported cookware could be leaching lead into your food — check for these brands now
Report: Apple’s touchscreen MacBook is coming, and it could blur the line with the iPad
I’m a mom and AI editor — here’s why OpenAI’s new ChatGPT rules hit close to home for me
Garmin launches the Venu 4 smartwatch to rival the Apple Watch Series 11 — and it has a built-in flashlight
LATEST ARTICLES
PS6 — latest rumors and leaks for the next PlayStation console
iPhone 18 Pro design tipped to be mostly unchanged from iPhone 17 Pro — which doesn’t surprise me
FDA warns that imported cookware could be leaching lead into your food — check for these brands now
27 AI models were ranked by the public and ChatGPT came 8th — these are the models that beat it
Forget baking soda — this app-controlled fridge air purifier claims to cut down on kitchen odors and keep your food fresher for longer
Tom’s Guide is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Terms and conditions
Contact Future’s experts
Privacy policy
Cookies policy
Accessibility Statement
Advertise with us
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait…