← Back

CVE-2023-42545

nvd nist
Published: Nov 7, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.

Affected (4)

Products: Samsung: Phone
Samsung
1 product
Phone
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Phone
Before 12.7.20.12
Running on/withPlatform Versions
Samsung
Android
Version 11.0
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Samsung
Phone
Before 13.1.48
Phone
From 13.5.0 to 13.5.28
Running on/withPlatform Versions
Samsung
Android
Version 12.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Phone
Before 14.7.38
Running on/withPlatform Versions
Samsung
Android
Version 13.0

References (2)

Source: mobile.security@samsung.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.