cbcvebase.
CVE-2025-20916
published 2025-03-06

CVE-2025-20916: Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

Affected

3 ranges
VendorProductVersion rangeFixed in
msrccbl2_python-virtualenv_20.26.6-1_on_cbl_mariner_2.0
msrccm1_python-pip_19.2-1_on_cbl_mariner_1.0
samsungnotes< 4.4.26.714.4.26.71