Vulnerability in Samsung Notes
CVE-2025-20977
Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.
EPSS: 0.001 (3.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Samsung Notes
- Samsung Mobile Notes — versions 4.4.29.23
References
- mobile.security@samsung.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-20977?
- CVE-2025-20977 is a low-severity vulnerability in Samsung Notes, classified under CWE-927: USE OF IMPLICIT INTENT FOR SENSITIVE COMMUNICATION. CVSS score: 3.3/10. Published 2025-05-07.
- How severe is CVE-2025-20977?
- Low severity. CVSS v3 base score is 3.3 out of 10.