CVE-2023-21441

Published: Feb 9, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.

Affected (113)

Products: Samsung: Android

Samsung

1 product

Android

Configuration A

113 vulnerable

Vulnerable Software	Affected Versions
Samsung Android	Version 10.0
Samsung Android	Version 10.0 smr-apr-2020-r1
Samsung Android	Version 10.0 smr-apr-2021-r1
Samsung Android	Version 10.0 smr-apr-2022-r1
Samsung Android	Version 10.0 smr-apr-2023-r1
Samsung Android	Version 10.0 smr-aug-2020-r1
Samsung Android	Version 10.0 smr-aug-2021-r1
Samsung Android	Version 10.0 smr-aug-2022-r1
Samsung Android	Version 10.0 smr-aug-2023-r1
Samsung Android	Version 10.0 smr-dec-2019-r1
Samsung Android	Version 10.0 smr-dec-2020-r1
Samsung Android	Version 10.0 smr-dec-2021-r1
Samsung Android	Version 10.0 smr-dec-2022-r1
Samsung Android	Version 10.0 smr-dec-2023-r1
Samsung Android	Version 10.0 smr-feb-2020-r1
Samsung Android	Version 10.0 smr-feb-2021-r1
Samsung Android	Version 10.0 smr-feb-2022-r1
Samsung Android	Version 10.0 smr-feb-2023-r1
Samsung Android	Version 10.0 smr-jan-2020-r1
Samsung Android	Version 10.0 smr-jan-2021-r1
Samsung Android	Version 10.0 smr-jan-2022-r1
Samsung Android	Version 10.0 smr-jul-2020-r1
Samsung Android	Version 10.0 smr-jul-2021-r1
Samsung Android	Version 10.0 smr-jul-2022-r1
Samsung Android	Version 10.0 smr-jul-2023-r1
Samsung Android	Version 10.0 smr-jun-2020-r1
Samsung Android	Version 10.0 smr-jun-2021-r1
Samsung Android	Version 10.0 smr-jun-2022-r1
Samsung Android	Version 10.0 smr-jun-2023-r1
Samsung Android	Version 10.0 smr-mar-2020-r1
Samsung Android	Version 10.0 smr-mar-2021-r1
Samsung Android	Version 10.0 smr-mar-2022-r1
Samsung Android	Version 10.0 smr-mar-2023-r1
Samsung Android	Version 10.0 smr-may-2020-r1
Samsung Android	Version 10.0 smr-may-2021-r1
Samsung Android	Version 10.0 smr-may-2022-r1
Samsung Android	Version 10.0 smr-may-2023-r1
Samsung Android	Version 10.0 smr-nov-2019-r1
Samsung Android	Version 10.0 smr-nov-2020-r1
Samsung Android	Version 10.0 smr-nov-2021-r1
Samsung Android	Version 10.0 smr-nov-2022-r1
Samsung Android	Version 10.0 smr-nov-2023-r1
Samsung Android	Version 10.0 smr-oct-2020-r1
Samsung Android	Version 10.0 smr-oct-2021-r1
Samsung Android	Version 10.0 smr-oct-2022-r1
Samsung Android	Version 10.0 smr-oct-2023-r1
Samsung Android	Version 10.0 smr-sep-2020-r1
Samsung Android	Version 10.0 smr-sep-2021-r1
Samsung Android	Version 10.0 smr-sep-2022-r1
Samsung Android	Version 10.0 smr-sep-2023-r1
Samsung Android	Version 11.0
Samsung Android	Version 11.0 smr-apr-2021-r1
Samsung Android	Version 11.0 smr-apr-2022-r1
Samsung Android	Version 11.0 smr-apr-2023-r1
Samsung Android	Version 11.0 smr-aug-2021-r1
Samsung Android	Version 11.0 smr-aug-2022-r1
Samsung Android	Version 11.0 smr-aug-2023-r1
Samsung Android	Version 11.0 smr-dec-2020-r1
Samsung Android	Version 11.0 smr-dec-2021-r1
Samsung Android	Version 11.0 smr-dec-2022-r1
Samsung Android	Version 11.0 smr-dec-2023-r1
Samsung Android	Version 11.0 smr-feb-2021-r1
Samsung Android	Version 11.0 smr-feb-2022-r1
Samsung Android	Version 11.0 smr-feb-2023-r1
Samsung Android	Version 11.0 smr-jan-2021-r1
Samsung Android	Version 11.0 smr-jan-2022-r1
Samsung Android	Version 11.0 smr-jul-2021-r1
Samsung Android	Version 11.0 smr-jul-2022-r1
Samsung Android	Version 11.0 smr-jul-2023-r1
Samsung Android	Version 11.0 smr-jun-2021-r1
Samsung Android	Version 11.0 smr-jun-2022-r1
Samsung Android	Version 11.0 smr-jun-2023-r1
Samsung Android	Version 11.0 smr-mar-2021-r1
Samsung Android	Version 11.0 smr-mar-2022-r1
Samsung Android	Version 11.0 smr-mar-2023-r1
Samsung Android	Version 11.0 smr-may-2021-r1
Samsung Android	Version 11.0 smr-may-2022-r1
Samsung Android	Version 11.0 smr-may-2023-r1
Samsung Android	Version 11.0 smr-nov-2021-r1
Samsung Android	Version 11.0 smr-nov-2022-r1
Samsung Android	Version 11.0 smr-nov-2023-r1
Samsung Android	Version 11.0 smr-oct-2021-r1
Samsung Android	Version 11.0 smr-oct-2022-r1
Samsung Android	Version 11.0 smr-oct-2023-r1
Samsung Android	Version 11.0 smr-sep-2021-r1
Samsung Android	Version 11.0 smr-sep-2022-r1
Samsung Android	Version 11.0 smr-sep-2023-r1
Samsung Android	Version 12.0
Samsung Android	Version 12.0 smr-apr-2022-r1
Samsung Android	Version 12.0 smr-apr-2023-r1
Samsung Android	Version 12.0 smr-aug-2022-r1
Samsung Android	Version 12.0 smr-aug-2023-r1
Samsung Android	Version 12.0 smr-dec-2021-r1
Samsung Android	Version 12.0 smr-dec-2022-r1
Samsung Android	Version 12.0 smr-dec-2023-r1
Samsung Android	Version 12.0 smr-feb-2022-r1
Samsung Android	Version 12.0 smr-feb-2023-r1
Samsung Android	Version 12.0 smr-jan-2022-r1
Samsung Android	Version 12.0 smr-jul-2022-r1
Samsung Android	Version 12.0 smr-jul-2023-r1
Samsung Android	Version 12.0 smr-jun-2022-r1
Samsung Android	Version 12.0 smr-jun-2023-r1
Samsung Android	Version 12.0 smr-mar-2022-r1
Samsung Android	Version 12.0 smr-mar-2023-r1
Samsung Android	Version 12.0 smr-may-2022-r1
Samsung Android	Version 12.0 smr-may-2023-r1
Samsung Android	Version 12.0 smr-nov-2021-r1
Samsung Android	Version 12.0 smr-nov-2022-r1
Samsung Android	Version 12.0 smr-nov-2023-r1
Samsung Android	Version 12.0 smr-oct-2022-r1
Samsung Android	Version 12.0 smr-oct-2023-r1
Samsung Android	Version 12.0 smr-sep-2022-r1
Samsung Android	Version 12.0 smr-sep-2023-r1

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02

Source: mobile.security@samsung.com

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.