Last week, the cybersecurity team at data-analytics-id=”inline-link” href=”https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/” target=”_blank” rel=”nofollow” data-url=”https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/” referrerpolicy=”no-referrer-when-downgrade” data-hl-processed=”none” data-mrf-recirculation=”inline-link”>Palo Alto Networks’ Unit 42 published a report that detailed their discovery of a vulnerability on the data-analytics-id=”inline-link” href=”https://www.tomsguide.com/best-picks/best-samsung-phone” data-mrf-recirculation=”inline-link” data-before-rewrite-localise=”https://www.tomsguide.com/best-picks/best-samsung-phone”>best Samsung phones. The bug, tracked as data-analytics-id=”inline-link” href=”https://nvd.nist.gov/vuln/detail/CVE-2025-21042″ target=”_blank” rel=”nofollow” data-url=”https://nvd.nist.gov/vuln/detail/CVE-2025-21042″ referrerpolicy=”no-referrer-when-downgrade” data-hl-processed=”none” data-mrf-recirculation=”inline-link”>CVE-2025-21042, exploits a flaw in the image processing library that left users vulnerable to a zero-day exploit for months.
Called “Landfall,” the exploit was patched by Samsung in April. However, it does appear that it had been left open since mid-2024, leaving select users vulnerable to malicious image files that…
