TLDR InfoSec · ATTACKS & VULNERABILITIES
SAMSUNG PATCHES ACTIVELY EXPLOITED ZERO-DAY REPORTED BY WHATSAPP DEVS
Summary from the TLDR InfoSec newsletter
Samsung patched a remote code execution vulnerability that impacted Samsung devices running Android 13 or later. The vulnerability arose from an out-of-bounds write in the libimagecodec.quram.so library, which is used for image parsing. Apple patched the relevant vulnerability in its devices last month after it was reported to it by WhatsApp and Meta researchers as well.