PT-2025-41530 · Samsung · Samsung Notes

Alex Birnberg + 1 · CVE-2025-21070 · Published 2025-10-10 · Updated 2025-10-16

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63

Description An out-of-bounds write issue exists in the SPI decoder of Samsung Notes. This allows a local attacker to write to memory outside of the allocated buffer.

Recommendations Update Samsung Notes to version 4.4.30.63 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-21070

Affected Products

Samsung Notes

References · 7

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21070 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21070 · Vendor Advisory
• https://t.me/cveNotify/139056 · Telegram Post
• https://twitter.com/CVEnew/status/1976547082254086401 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1976591895997354236 · Twitter Post
• https://t.me/CVEtracker/34555 · Telegram Post