Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21428 EUVD-2023-25596GHSA-7jr4-mg5p-52mh

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The pa…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Description

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The patch removes unused code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12), T(13) – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References