CVE-2025-20916

Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

CVE-2025-20916

CVE-2025-20916 describes an out-of-bounds read in Samsung Notes’ SPen string reading path. The vulnerability affects Samsung Notes versions prior to 4.4.26.71, enabling an attacker to read out-of-bounds memory. The issue is due to improper bounds checks when reading the SPen string, leading to po...