Samsung Notes libSPenBase Buffer Overflow Vulnerability (CNVD-2022-86540)

Samsung Notes is an application from Samsung, a South Korean company, used to provide a logging function. A buffer overflow vulnerability exists in versions prior to Samsung Note 4.3.02.61. The vulnerability stems from a lack of buffer boundary checking in the libSPenBase library, which can be exploited by remote attackers to submit special requests for arbitrary memory writes and arbitrary code.