Samsung Notes vulnerabilities

CVE-2024-34657 [CRITICAL] CWE-787 CVE-2024-34657: Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code.

CVE-2024-34623 [HIGH] CWE-787 CVE-2024-34623: Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 al Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege.

CVE-2024-34622 [HIGH] CWE-787 CVE-2024-34622: Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege.

CVE-2024-34660 [HIGH] CWE-787 CVE-2024-34660: Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.

CVE-2025-20929 [HIGH] CWE-787 CVE-2025-20929: Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local a Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code.

CVE-2025-20931 [HIGH] CWE-787 CVE-2025-20931: Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local at Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code.

CVE-2024-34656 [HIGH] CWE-22 CVE-2024-34656: Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitra Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.

CVE-2025-20922 [HIGH] CWE-125 CVE-2025-20922: Out-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows at Out-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20918 [HIGH] CWE-125 CVE-2025-20918: Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.7 Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20917 [HIGH] CWE-125 CVE-2025-20917: Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 all Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20920 [HIGH] CWE-125 CVE-2025-20920: Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20915 [HIGH] CWE-125 CVE-2025-20915: Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 a Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20916 [HIGH] CWE-125 CVE-2025-20916: Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows atta Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20919 [HIGH] CWE-125 CVE-2025-20919: Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 a Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20914 [HIGH] CWE-125 CVE-2025-20914: Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4. Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20921 [HIGH] CWE-125 CVE-2025-20921: Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71 al Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

CVE-2025-20976 [HIGH] CWE-125 CVE-2025-20976: Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 al Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory.

CVE-2021-25494 [HIGH] CWE-125 CVE-2021-25494: A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung No A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.

CVE-2021-25495 [HIGH] CWE-122 CVE-2021-25495: A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsu A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.

CVE-2021-25497 [HIGH] CWE-120 CVE-2021-25497: A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.