Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-21445 EUVD-2023-25613GHSA-q22j-6g9r-wc97

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 i…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Description

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

Affected products

VendorProductAffectedFixed
Samsung Mobile The patch adds proper access control to use explicit intent. unspecified – < 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13)

References