CVE-2026-21107
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Risk Assessment
Risk includes potential memory corruption, which could lead to unauthorized access or app crash.
Recommendation
Update Samsung Notes to version 4.4.45.5 or later, which includes the fix.
Other vulnerabilities in Samsung Notes
See all- CVE-2025-21069Medium
Samsung Notes prior to version 4.4.30.63 has an out-of-bounds read vulnerability during parsing of image data, allowing local attackers to access out-of-bounds memory.
- CVE-2025-21037Medium
Samsung Notes prior to version 4.4.30.63 has improper access control, allowing physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS