CVE-2025-21057
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
Risk Assessment
A local attacker could access shared notes, potentially compromising the confidentiality of information.
Recommendation
Update Samsung Notes to version 4.4.30.63 or later.
Other vulnerabilities in Samsung Notes
See all- CVE-2026-21107Medium
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
- CVE-2025-21070Medium
An out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.
- CVE-2025-21069Medium
Samsung Notes prior to version 4.4.30.63 has an out-of-bounds read vulnerability during parsing of image data, allowing local attackers to access out-of-bounds memory.
- CVE-2025-21068Medium
An out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
- CVE-2025-21067Medium
An out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
- CVE-2025-21066Medium
An out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
- CVE-2025-21037Medium
Samsung Notes prior to version 4.4.30.63 has improper access control, allowing physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS