Skip to content
OpenAdvisories
Critical · 9.0 CVE-2023-21456 EUVD-2023-25624GHSA-qmcj-8g67-9633

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system …

Published Mar 16, 2023 · Updated Feb 26, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Android 11, 12, 13 – < SMR Mar-2023 Release 1 SMR Mar-2023 Release 1

References