Firetruck

CVE-2023-21492

KEV

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

View CVE record →
Vendor / Project
Samsung
Product
Mobile Devices
Date added
May 19, 2023
Due date
Jun 9, 2023
Known ransomware use
Unknown
CWEs
CWE-532

Description

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Required action

Apply updates per vendor instructions.

Notes