Samsung phone users need to update immediately to patch serious vulnerabilities

(Dan Tri) - The focus of this attack is a "zero-click" vulnerability related to the WhatsApp messaging application.

If you own a Samsung phone, update your device immediately (Illustration: ST).

Samsung has issued an urgent warning about active attacks targeting its Galaxy smartphone line and has released a September security patch to fix the vulnerability.

Accordingly, the vulnerability affects devices running Android 13 and above. On Samsung's security blog, the vulnerability is tracked with the identifier CVE-2025-21043 and reported by WhatsApp itself.

Samsung confirmed that it “has been informed that an exploit for this vulnerability exists and is being used in the wild.”

The root cause is a vulnerability in a third-party image parsing library that could allow attackers to remotely execute malicious code on Galaxy devices.

It's currently unclear whether the issue is limited to WhatsApp or affects other messaging platforms as well.

However, with WhatsApp's massive user base of nearly 3 billion, the number of potential victims that could be affected is extremely large.

Zero-click attack

“Zero-click” attacks (which require no user interaction) are rare but particularly dangerous. With this technique, hackers can exploit data verification vulnerabilities to take control of a device remotely without the victim having to click on a link or open a file.

Vulnerabilities of this type are often weaponized in high-tech espionage campaigns aimed at sensitive targets such as politicians , diplomats, journalists or defense personnel.

In fact, just last month WhatsApp had to release a patch for a similar iPhone vulnerability after recording multiple zero-click attacks targeting influential individuals.

For Android phones in general and Galaxy phones in particular, the most important defense is to always update the operating system and applications. However, unlike Google Pixel or iPhone, which have synchronized patches, Samsung users often have to wait longer because the update process is deployed by each phone model, region and carrier.

If your device is on the monthly update list, install the patch as soon as it is notified and reboot your device.

In cases where the device rarely receives updates, users can still protect themselves by installing reputable anti-virus software, regularly changing passwords and being careful with sensitive data.

Source: https://dantri.com.vn/cong-nghe/nguoi-dung-dien-thoai-samsung-can-cap-nhat-ngay-de-va-lo-hong-nghiem-trong-20250915110756675.htm