CVE Feed

    Dashboard / CVE / CVE-2025-21070

    CVE-2025-21070

    Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.

    Published:Oct 10, 2025
    Last Modified:Oct 20, 2025
    EPS:Oct 10, 2025
    EPSS Score:0.00016
    CVSS Score:4

    Affected Products

    Vendor
    Samsung
    Product
    Mobile Devices
    Vendor
    Samsung
    Product
    Notes

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-21069 (CVSS 5.1) — Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows…
    CVE-2026-21065 (CVSS 4.8) — Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write…
    CVE-2026-21039 (CVSS 6.9) — Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft …
    CVE-2026-21029 (CVSS 6.8) — Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 al…
    CVE-2026-21026 (CVSS 6.4) — Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows lo…
    CVE-2026-21023 (CVSS 6.9) — Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows…
    CVE-2026-21010 (CVSS 6.6) — Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger pri…
    CVE-2026-21008 (CVSS 5.1) — Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to acces…
    CVE-2026-21012 (CVSS 6.8) — External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker t…
    CVE-2026-21011 (CVSS 5.4) — Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physica…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High