Samsung - Zero Day CVE

[madasaf1sh]

If you have a Samsung Phone running Android 13 or newer, get it updated, as Samsung have released an critical patch to fix a CVE which allows a attacker to run remote code on a unpatched (to the latest update) Samsung Phone or Tablet:

ttps://www.cve.org/CVERecord?id=CVE-2025-21043

CVE-2025-21043

https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09

https://thehackernews.com/2025/09/samsung-fixes-critical-zero-day-cve.htm

[TallTrees]

@madasaf1sh 

Thank you very much for this information.

My last update installed was August 6th 2025.

I assume this will take the fix into account.

[madasaf1sh]

@TallTrees 

It will be in Septembers Security update from the research I have done..

[TallTrees]

@madasaf1sh 

Thank you ..  It'll probably be in that. 

My Samsung galaxy A70 only has infrequent updates last June 2024. 🤣

[Cleoriff]

Thanks for the info @madasaf1sh 

[jonsie]

Had the August update but Septembers security update going off past updates will be around the 18th of the month so I will check again then

Cheers @madasaf1sh 

[Spindle]

Being an older model, the A70 won't be getting software or security updates anymore.

[TallTrees]

Hi @Spindle 

Thank you.

It is a pity because it works perfectly and has an O2 paygo sim.

Anyway as advised .. it is checked  with security device information in phone and regular scan. No downloads, or tricky apps don't need any.  There were too many to start with. 

It is still being used and enjoyed.

I think (maybe wrong) forces a new sale by withdrawing security patches then intimidating by saying unsafe.  🤔 

Going forward with the A70 .. as long as possible 😊

[madasaf1sh]

The information I have, is a security update will be pushed to all Samsung phones running Android 13 or above... 

[Spindle]

Having a little read and it seems that this vulnerability only affects Android 13 or later. 

As your phone is Android 11 it won't affect you anyway.