PT-2025-9902 · Samsung · Samsung Notes

Var10Ck · Publicado 2025-03-06 · Atualizado 2025-07-16 · CVE-2025-20931

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.26.71

Description The issue is related to an out-of-bounds write in the parsing of bmp images, which can be exploited by local attackers to execute arbitrary code.

Recommendations For versions prior to 4.4.26.71, update to version 4.4.26.71 or later to resolve the issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-20931

Produtos afetados

Samsung Notes

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-20931 · Nota de Segurança
• https://twitter.com/CVEnew/status/1897539151890931896 · Publicação no Twitter
• https://t.me/cvenotify/129211 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-20931 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1897528538439340146 · Publicação no Twitter
• https://twitter.com/cybercronai/status/1897808299967308000 · Publicação no Twitter
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=03 · Aviso do Fabricante