CVE-2025-21037
BaseFortify
Publication date: 2025-09-03
Last updated on: 2025-09-09
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | notes | to 4.4.30.63 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in Samsung Notes versions prior to 4.4.30.63. It allows physical attackers to access data across multiple user profiles on the device. Exploiting this vulnerability requires user interaction to trigger it.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to sensitive data stored in Samsung Notes across different user profiles. This could result in exposure of confidential information to physical attackers who have limited access to the device but can trick a user into triggering the vulnerability.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Samsung Notes to version 4.4.30.63 or later, as the issue is fixed in that version. Additionally, restrict physical access to devices and ensure proper user profile management to reduce risk.