Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-21426 EUVD-2023-25594GHSA-676r-wmg9-6ww8

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN.

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Select Q(10) devices – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References