Skip to main content

Notes CVE-2025-20919

MEDIUM
Out-of-bounds Read (CWE-125)
2025-03-06 mobile.security@samsung.com
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:30 vuln.today
CVE Published
Mar 06, 2025 - 05:15 nvd
MEDIUM 5.5

DescriptionCVE.org

Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.

AnalysisAI

Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. Affected products include: Samsung Notes. Version information: version 4.4.26.71.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.

More in Notes

View all
CVE-2024-34657 CRITICAL
9.8 Sep 04

Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary

CVE-2020-14224 CRITICAL
9.8 Dec 18

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthentic

CVE-2020-14268 CRITICAL
9.8 Dec 14

A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by a

CVE-2020-14232 HIGH
8.8 Dec 18

A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attac

CVE-2024-34660 HIGH
7.8 Sep 04

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary c

CVE-2024-34656 HIGH
7.8 Sep 04

Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. Rated high

CVE-2024-34623 HIGH
7.8 Aug 07

Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers

CVE-2024-34622 HIGH
7.8 Aug 07

Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti

CVE-2022-44755 HIGH
7.8 Dec 19

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. Rated high s

CVE-2022-44753 HIGH
7.8 Dec 19

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. Rated high

CVE-2022-44751 HIGH
7.8 Dec 19

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. Rated high s

CVE-2021-25498 HIGH
7.8 Oct 06

A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung N

Share

CVE-2025-20919 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy