CVE-2025-21070: Samsung Notes

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.

Affected products

• Samsung Notes: before 4.4.30.63 (fixed in 4.4.30.63)

Published 2025-10-10. Last modified 2026-10-08.