CVE-2025-20916

CVE-2025-20916 describes an out-of-bounds read in Samsung Notes’ SPen string reading path. The vulnerability affects Samsung Notes versions prior to 4.4.26.71, enabling an attacker to read out-of-bounds memory. The issue is due to improper bounds checks when reading the SPen string, leading to po...