Read the docs
TI-2023-07846 Aliases CVE-2023-21445GHSA-q22j-6g9r-wc97

Improper access control in Samsung The patch adds proper access control to use explicit…

Priority LOW 33CWE-284Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00186 8th percentileScored 2026-11-08
Fix Fixed The patch adds proper access control to use explicit intent. (Samsung Mobile): 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13)

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungThe patch adds proper access control to use explicit intent.before 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13)12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13)Patch availableCNA
  • The patch adds proper access control to use explicit intent. VendorSamsung Affected before 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) Fixed in 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) Patch available CNA

CPE configurations NVD · 78

CPEVersionsRoleVendor
cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*11.0VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*11.0 smr-apr-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*11.0 smr-apr-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*11.0 smr-apr-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*11.0 smr-aug-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*11.0 smr-aug-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*11.0 smr-aug-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*11.0 smr-dec-2020-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*11.0 smr-dec-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*11.0 smr-dec-2022-r1VulnerableSamsung
  • cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:* Versions 11.0 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:* Versions 11.0 smr-apr-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:* Versions 11.0 smr-apr-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:* Versions 11.0 smr-apr-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:* Versions 11.0 smr-aug-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:* Versions 11.0 smr-aug-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:* Versions 11.0 smr-aug-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:* Versions 11.0 smr-dec-2020-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:* Versions 11.0 smr-dec-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:* Versions 11.0 smr-dec-2022-r1 Vulnerable ·Samsung
Show 68 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*11.0 smr-dec-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*11.0 smr-feb-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*11.0 smr-feb-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*11.0 smr-feb-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*11.0 smr-jan-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*11.0 smr-jan-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*11.0 smr-jul-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*11.0 smr-jul-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*11.0 smr-jul-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*11.0 smr-jun-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*11.0 smr-jun-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*11.0 smr-jun-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*11.0 smr-mar-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*11.0 smr-mar-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*11.0 smr-mar-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*11.0 smr-may-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*11.0 smr-may-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*11.0 smr-may-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*11.0 smr-nov-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*11.0 smr-nov-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*11.0 smr-nov-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*11.0 smr-oct-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*11.0 smr-oct-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*11.0 smr-oct-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*11.0 smr-sep-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*11.0 smr-sep-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*11.0 smr-sep-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*12.0VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*12.0 smr-apr-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*12.0 smr-apr-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*12.0 smr-aug-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*12.0 smr-aug-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*12.0 smr-dec-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*12.0 smr-dec-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*12.0 smr-dec-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*12.0 smr-feb-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*12.0 smr-feb-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*12.0 smr-jan-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*12.0 smr-jul-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*12.0 smr-jul-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*12.0 smr-jun-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*12.0 smr-jun-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*12.0 smr-mar-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*12.0 smr-mar-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*12.0 smr-may-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*12.0 smr-may-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*12.0 smr-nov-2021-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*12.0 smr-nov-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*12.0 smr-nov-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*12.0 smr-oct-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*12.0 smr-oct-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*12.0 smr-sep-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*12.0 smr-sep-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*13.0VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*13.0 smr-apr-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*13.0 smr-aug-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*13.0 smr-dec-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*13.0 smr-dec-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*13.0 smr-feb-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*13.0 smr-jul-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*13.0 smr-jun-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*13.0 smr-mar-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*13.0 smr-may-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*13.0 smr-nov-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*13.0 smr-nov-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*13.0 smr-oct-2022-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*13.0 smr-oct-2023-r1VulnerableSamsung
cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*13.0 smr-sep-2023-r1VulnerableSamsung
  • cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:* Versions 11.0 smr-dec-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:* Versions 11.0 smr-feb-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:* Versions 11.0 smr-feb-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:* Versions 11.0 smr-feb-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:* Versions 11.0 smr-jan-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:* Versions 11.0 smr-jan-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:* Versions 11.0 smr-jul-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:* Versions 11.0 smr-jul-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:* Versions 11.0 smr-jul-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:* Versions 11.0 smr-jun-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:* Versions 11.0 smr-jun-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:* Versions 11.0 smr-jun-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:* Versions 11.0 smr-mar-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:* Versions 11.0 smr-mar-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:* Versions 11.0 smr-mar-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:* Versions 11.0 smr-may-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:* Versions 11.0 smr-may-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:* Versions 11.0 smr-may-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:* Versions 11.0 smr-nov-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:* Versions 11.0 smr-nov-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:* Versions 11.0 smr-nov-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:* Versions 11.0 smr-oct-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:* Versions 11.0 smr-oct-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:* Versions 11.0 smr-oct-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:* Versions 11.0 smr-sep-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:* Versions 11.0 smr-sep-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:* Versions 11.0 smr-sep-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* Versions 12.0 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* Versions 12.0 smr-apr-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:* Versions 12.0 smr-apr-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* Versions 12.0 smr-aug-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:* Versions 12.0 smr-aug-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* Versions 12.0 smr-dec-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* Versions 12.0 smr-dec-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:* Versions 12.0 smr-dec-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:* Versions 12.0 smr-feb-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:* Versions 12.0 smr-feb-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:* Versions 12.0 smr-jan-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:* Versions 12.0 smr-jul-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:* Versions 12.0 smr-jul-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:* Versions 12.0 smr-jun-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:* Versions 12.0 smr-jun-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:* Versions 12.0 smr-mar-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:* Versions 12.0 smr-mar-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:* Versions 12.0 smr-may-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:* Versions 12.0 smr-may-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:* Versions 12.0 smr-nov-2021-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:* Versions 12.0 smr-nov-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:* Versions 12.0 smr-nov-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:* Versions 12.0 smr-oct-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:* Versions 12.0 smr-oct-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:* Versions 12.0 smr-sep-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:* Versions 12.0 smr-sep-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* Versions 13.0 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* Versions 13.0 smr-apr-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:* Versions 13.0 smr-aug-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* Versions 13.0 smr-dec-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:* Versions 13.0 smr-dec-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* Versions 13.0 smr-feb-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:* Versions 13.0 smr-jul-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:* Versions 13.0 smr-jun-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* Versions 13.0 smr-mar-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:* Versions 13.0 smr-may-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* Versions 13.0 smr-nov-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:* Versions 13.0 smr-nov-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* Versions 13.0 smr-oct-2022-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:* Versions 13.0 smr-oct-2023-r1 Vulnerable ·Samsung
  • cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:* Versions 13.0 smr-sep-2023-r1 Vulnerable ·Samsung

Remediation

  • Fix · CNA The patch adds proper access control to use explicit intent. (Samsung Mobile) Fixed in 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-21445
  2. 2026-10-03 Alias added: GHSA-q22j-6g9r-wc97

References

Advisory 1

  • TI-2025-15039 Out-of-bounds write in Samsung Mobile Devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-15038 Out-of-bounds write in Samsung Mobile Devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-07726 Out-of-bounds read in Samsung Mobile Devices KEVCVSS 3.1HIGH 7.8
  • TI-2021-07611 An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. KEVCVSS 3.1MEDIUM 6.7
  • TI-2021-07610 A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. KEVCVSS 3.1MEDIUM 6.7
  • TI-2021-07634 Race condition in Samsung Mobile Devices KEVCVSS 3.1MEDIUM 6.4
See all 501 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences