CVE Feed

    Dashboard / CVE / CVE-2025-21068

    CVE-2025-21068

    Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

    Published:Oct 10, 2025
    Last Modified:Oct 20, 2025
    EPS:Oct 10, 2025
    EPSS Score:0.00014
    CVSS Score:4

    Affected Products

    Vendor
    Samsung
    Product
    Mobile Devices
    Vendor
    Samsung
    Product
    Notes

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-21069 (CVSS 5.1) — Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows…
    CVE-2026-21065 (CVSS 4.8) — Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write…
    CVE-2026-21039 (CVSS 6.9) — Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft …
    CVE-2026-21029 (CVSS 6.8) — Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 al…
    CVE-2026-21026 (CVSS 6.4) — Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows lo…
    CVE-2026-21023 (CVSS 6.9) — Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows…
    CVE-2026-21010 (CVSS 6.6) — Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger pri…
    CVE-2026-21008 (CVSS 5.1) — Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to acces…
    CVE-2026-21012 (CVSS 6.8) — External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker t…
    CVE-2026-21011 (CVSS 5.4) — Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physica…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High