Skip to content
OpenAdvisories
High · 7.4 CVE-2023-21441 EUVD-2023-25609GHSA-ffqj-6rqc-8hr7

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Description

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Routine unspecified – < 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12)

References