Buffer Overflow Vulnerability in Samsung Notes Library
CVE-2021-25498

7.3HIGH

Key Information:

Vendor
Samsung
Status
Samsung Notes
Vendor
CVE Published:
6 October 2021

Summary

A buffer overflow vulnerability in the maetd_eco_cb_mode function of the libSPenBase library in Samsung Notes allows attackers to execute arbitrary code. This vulnerability affects all versions of Samsung Notes prior to 4.3.02.61, posing a significant risk to users who have not updated to the latest version. Proper updates and security measures are recommended to mitigate the risk associated with this vulnerability.

Affected Version(s)

Samsung Notes - < 4.3.02.61

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.