CVE-2025-21037
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Samsung Notes prior to version 4.4.30.63 has improper access control, allowing physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
Risk Assessment
An individual with physical access to the device could access data from other user profiles, compromising privacy and data confidentiality.
Recommendation
Update Samsung Notes to version 4.4.30.63 or later, which includes a fix for the access control issue.
Other vulnerabilities in Samsung Notes
See all- CVE-2026-21107Medium
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
- CVE-2025-21069Medium
Samsung Notes prior to version 4.4.30.63 has an out-of-bounds read vulnerability during parsing of image data, allowing local attackers to access out-of-bounds memory.
Original NVD description (English source)
Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS