← KEV catalog
CISA known exploited vulnerability

CVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

SOURCE FACT

Samsung · Mobile Devices

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Required action

Apply updates per vendor instructions.

CISA notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2023-21492

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?