Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Description

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 9 Jun 2023.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.