Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21437 EUVD-2023-25605GHSA-22cq-h96p-qcc2

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive infor…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12), T(13) – < SMR Feb-2023 Release 1 SMR Feb-2023 Release 1

References