Samsung Libimagecodec Exploitation LANDFALL

Tim Peck@timpeck

•updated Nov 7, 2025•1•0•34

Detects process crashes within the Samsung 'libimagecodec.quram.so' library, which could indicate an exploitation attempt related to the LANDFALL spyware (CVE-2025-21042, CVE-2025-21043).