PT-2021-16688 · Samsung · Libspenbase+1

Dawuge · Published 2021-10-06 · Updated 2021-10-14 · CVE-2021-25498

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.3.02.61

Description A possible buffer overflow vulnerability in the maetd eco cb mode of the libSPenBase library allows arbitrary code execution.

Recommendations For versions prior to 4.3.02.61, update to version 4.3.02.61 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-25498

Affected Products

Samsung Notes

Libspenbase

References · 4

• https://osv.dev/vulnerability/CVE-2021-25498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25498 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10 · Vendor Advisory
• https://t.me/cibsecurity/30091 · Telegram Post