The sensitive information exposure vulnerability in Quick Share Agent prior to versions…
Priority LOW 19CWE-215Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
Why it matters now
EPSS 0.00157 4th percentileScored 2026-11-07
Fix Fixed Quick Share Agent (Samsung Mobile): 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Quick Share Agent | before 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 | 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 | Patch available | CNA |
- Quick Share Agent VendorSamsung Affected before 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 Fixed in 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:* | before 3.5.14.18 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | 12.0 | Running on | |
| cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:* | before 3.5.16.20 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* | 13.0 | Running on |
- cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:* Versions before 3.5.14.18 Vulnerable ·Samsung
- cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* Versions 12.0 Running on ·Google
- cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:* Versions before 3.5.16.20 Vulnerable ·Samsung
- cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* Versions 13.0 Running on ·Google
Remediation
- Fix · CNA Quick Share Agent (Samsung Mobile) Fixed in 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13
Timeline
- 2026-10-02 Threatist record created from CVE-2023-21462
- 2026-10-03 Alias added: GHSA-v958-rf72-rpxh
References
More Samsung Quick Share vulnerabilities
- TI-2023-22694 Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files. CVSS 3.1MEDIUM 5.5
- TI-2022-12880 Improper access control in Samsung Quick Share CVSS 3.1MEDIUM 5.5
- TI-2024-33006 Path traversal in Samsung Quick Share Agent CVSS 3.1MEDIUM 4.3
- TI-2022-18854 Improper access control in Samsung QuickShare CVSS 3.1MEDIUM 4.4
Sources
- CVE-2023-21462 · CVE Program
- CVE-2023-21462 · NVD
- FIRST EPSS
- GHSA-v958-rf72-rpxh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences