Skip to content
OpenAdvisories
Low · 3.3 CVE-2023-21436 EUVD-2023-25604GHSA-hcq5-6f6r-26hq

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID.

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12), T(13) – < SMR Feb-2023 Release 1 SMR Feb-2023 Release 1

References