Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21442 EUVD-2023-25610GHSA-j8jm-7c59-6vxq

Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12)…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Runestone

Description

Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information.

Affected products

VendorProductAffectedFixed
Samsung Mobile Runestone unspecified – < 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12)

References