CISA orders feds to patch Samsung zero-day used in spyware attacks

CVE-2025-21042 was discovered in Samsung’s libimagecodec.quram.so library, allowing remote attackers to gain code execution on devices running Android 13 and later.