# CVE-2025-21066: Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

Source: https://junglewise.ai/threats/cve-2025-21066-out-of-bounds-read-in-the-spi-decoder-in-samsung-notes-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-10  
License: CC BY 4.0 with a link back

CVE-2025-21066 · Severity: medium · CVSS 4 · Published 2025-10-10

Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

Technologies: [Samsung Notes](https://junglewise.ai/threats/technologies/samsung-notes). Vendors: [Samsung](https://junglewise.ai/threats/vendors/samsung).

## Quick answers

**Is CVE-2025-21066 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-21066 being exploited in the wild.

**How severe is CVE-2025-21066?** Medium severity, with a CVSS score of 4, published 10 October 2025.

**Which products and versions are affected?** Samsung Notes. The advisory does not name versions.

**Is there a fix for CVE-2025-21066?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-21066?** Check whether you run Samsung Notes. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Samsung Notes

## Related threats

- [Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.](https://junglewise.ai/threats/cve-2025-21070-out-of-bounds-write-in-the-spi-decoder-in-samsung-notes-prior-to)
- [Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to…](https://junglewise.ai/threats/cve-2025-21069-out-of-bounds-read-in-the-parsing-of-image-data-in-samsung-notes)
- [Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to…](https://junglewise.ai/threats/cve-2025-21068-out-of-bounds-read-in-the-reading-of-image-data-in-samsung-notes)
- [Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local…](https://junglewise.ai/threats/cve-2025-21067-out-of-bounds-read-in-the-allocation-of-image-buffer-in-samsung)
- [Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers…](https://junglewise.ai/threats/cve-2025-21057-use-of-implicit-intent-for-sensitive-communication-in-samsung)