Samsung Notes vulnerabilities

CVE-2021-25405 [MEDIUM] CWE-284 CVE-2021-25405: An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2. An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files.

CVE-2024-34627 [MEDIUM] CWE-125 CVE-2024-34627: Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34626 [MEDIUM] CWE-125 CVE-2024-34626: Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local a Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34630 [MEDIUM] CWE-125 CVE-2024-34630: Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 a Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34629 [MEDIUM] CWE-125 CVE-2024-34629: Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4. Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34631 [MEDIUM] CWE-125 CVE-2024-34631: Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local a Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34625 [MEDIUM] CWE-125 CVE-2024-34625: Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows l Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2024-34624 [MEDIUM] CWE-125 CVE-2024-34624: Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local a Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.

CVE-2025-20928 [MEDIUM] CWE-125 CVE-2025-20928: Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local a Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.

CVE-2025-20933 [MEDIUM] CWE-125 CVE-2025-20933: Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local att Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.

CVE-2025-20927 [MEDIUM] CWE-125 CVE-2025-20927: Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local a Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.

CVE-2025-20925 [MEDIUM] CWE-125 CVE-2025-20925: Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allow Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory.

CVE-2025-20930 [MEDIUM] CWE-125 CVE-2025-20930: Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local at Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.

CVE-2025-21036 [MEDIUM] CVE-2025-21036: Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attacker Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability.

CVE-2025-20924 [MEDIUM] CVE-2025-20924: Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to acc Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles.

CVE-2025-21037 [MEDIUM] CVE-2025-21037: Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to acc Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.

CVE-2025-21057 [LOW] CVE-2025-21057: Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allow Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.

CVE-2021-25402 [LOW] CWE-922 CVE-2021-25402: Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to ac Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.

CVE-2024-34634 [LOW] CWE-125 CVE-2024-34634: Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allo Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.

CVE-2024-34633 [LOW] CWE-125 CVE-2024-34633: Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory.