CVE-2025-20977: Samsung Notes

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

Affected products

• Samsung Notes: before 4.4.26.71 (fixed in 4.4.26.71)

Published 2025-05-07. Last modified 2026-06-17.