{"uuid": "b88adaaa-7d3b-49c1-8ef5-65a889d3d98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-21042", "type": "seen", "source": "https://t.me/pphm_HackerNews/1117", "content": "Photo File Deception Zero-Day Vulnerability Found in Mobile OS\n\nSecurity researchers have uncovered a new, sophisticated espionage operation leveraging a critical, previously unknown software flaw to compromise a range of popular mobile devices. This campaign, active since mid-2024, utilized a zero-day vulnerability (tracked as CVE-2025-21042) found within the core image processing library of a major device manufacturer. The flaw allowed attackers to initiate a zero-click infection, meaning the victim did not need to open a suspicious link or install a malicious application; the compromise occurred merely by receiving or previewing a specially crafted file.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.938463Z"}