Cleartext transmission of sensitive information in Samsung Keyboard
Priority LOW 28CWE-319Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-319.
Summary
Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack.
Why it matters now
EPSS 0.00171 6th percentileScored 2026-11-07
Fix Fixed Samsung Keyboard (Samsung Mobile): 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5 +4
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Samsung Keyboard | — | 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 | Patch available | CNA |
- Samsung Keyboard VendorSamsung Affected — Fixed in 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:samsung_keyboard:*:*:*:*:*:*:*:* | before 5.3.70.1; 5.4.60.0 to before 5.4.60.49; 5.4.85.0 to before 5.4.85.5; 5.5.00.0 to before 5.5.00.58 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | 11.0 | Running on | |
| cpe:2.3:a:samsung:samsung_keyboard:*:*:*:*:*:*:*:* | 5.6.00.0 to before 5.6.00.52; 5.6.10.0 to before 5.6.10.42; 5.7.00.0 to before 5.7.00.45 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | 12.0 | Running on | |
| cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* | 13.0 | Running on |
- cpe:2.3:a:samsung:samsung_keyboard:*:*:*:*:*:*:*:* Versions before 5.3.70.1; 5.4.60.0 to before 5.4.60.49; 5.4.85.0 to before 5.4.85.5; 5.5.00.0 to before 5.5.00.58 Vulnerable ·Samsung
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·Google
- cpe:2.3:a:samsung:samsung_keyboard:*:*:*:*:*:*:*:* Versions 5.6.00.0 to before 5.6.00.52; 5.6.10.0 to before 5.6.10.42; 5.7.00.0 to before 5.7.00.45 Vulnerable ·Samsung
- cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* Versions 12.0 Running on ·Google
- cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* Versions 13.0 Running on ·Google
Remediation
- Fix · CNA Samsung Keyboard (Samsung Mobile) Fixed in 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13
Timeline
- 2026-10-02 Threatist record created from CVE-2023-42579
- 2026-10-03 Alias added: GHSA-69hr-vv26-mcwr
References
Sources
- CVE-2023-42579 · CVE Program
- CVE-2023-42579 · NVD
- FIRST EPSS
- GHSA-69hr-vv26-mcwr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences