CVE-2025-20977: Low severity samsung notes vulnerability
Published May 7, 2025
·Updated
Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.
Affected Software
2 affected components
Samsung Notes<4.4.29.23
Samsung Notes<4.4.26.71
Event History
May 7, 2025
CVE Published
via MITRE·08:24 AM
Data Sourced
via MITRE·08:24 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20977?
CVE-2025-20977 is considered a moderate severity vulnerability due to its requirement for user interaction and potential exposure of sensitive information.
2
How do I fix CVE-2025-20977?
To fix CVE-2025-20977, update Samsung Notes to version 4.4.29.23 or later.
3
What type of attack does CVE-2025-20977 enable?
CVE-2025-20977 enables local attackers to gain access to sensitive information through the use of implicit intents.
4
Is user interaction needed to exploit CVE-2025-20977?
Yes, user interaction is required to trigger the exploitation of CVE-2025-20977.
5
Which versions of Samsung Notes are affected by CVE-2025-20977?
Samsung Notes versions prior to 4.4.29.23 are affected by CVE-2025-20977.