CVE-2025-21069
published 2025-10-10CVE-2025-21069: Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.12%
2.1th percentile
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | notes | < 4.4.30.63 | 4.4.30.63 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Samsung Notes up to 4.4.29.23 Image out-of-bounds (EUVD-2025-33664)
vuldb·2026-10-03·CVSS 7.1
CVE-2025-21069 [HIGH] Samsung Notes up to 4.4.29.23 Image out-of-bounds (EUVD-2025-33664)
A vulnerability was found in Samsung Notes up to 4.4.29.23. It has been declared as problematic. This vulnerability affects unknown code of the component Image Handler. The manipulation results in out-of-bounds read.
This vulnerability was named CVE-2025-21069. The attack needs to be approached locally. There is no available exploit.
It is recommended to upgrade the affected component.
GHSA
GHSA-g846-wvv3-rr6g: Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4
ghsa_unreviewed·2025-10-10
CVE-2025-21069 [MEDIUM] CWE-125 GHSA-g846-wvv3-rr6g: Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-10
Published