CVE-2023-21486 - Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox

Back Back to CVE browser

MEDIUM

Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox

Published May 4, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 0.25%

Description

Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.

Affected products

Vendor Samsung Mobile Product Samsung Mobile Devices Default
n/a
- Version
  Android 11, 12, 13
  Status
  affected
  Constraints
  <SMR May-2023 Release 1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Samsung Mobile

Samsung Mobile Devices

n/a

Version	Status	Constraints
Android 11, 12, 13	affected	<SMR May-2023 Release 1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-926

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-25654
Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-25654		Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05		Vendor Advisory