coldbraid

CVE-2023-21492 Samsung Mobile Devices

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

CVSS
not scored

CWE-532

On CISA’s exploited list

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Added
2023-05-19
Federal patch deadline
2023-06-09
Ransomware use
not known