CVE-2025-21036
BaseFortify
Publication date: 2025-09-03
Last updated on: 2025-09-09
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | notes | to 4.4.30.63 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in Samsung Notes versions prior to 4.4.30.63. It allows local privileged attackers to access exported note files. Exploiting this vulnerability requires user interaction to trigger it.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to exported note files by local privileged attackers, potentially exposing sensitive information contained in those notes. However, it requires user interaction to be exploited.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Samsung Notes to version 4.4.30.63 or later, as the issue is fixed in that version. Additionally, restrict local privileged user access to exported note files and be cautious with user interactions that may trigger the vulnerability.