Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21469 EUVD-2023-25637GHSA-g493-4qc7-p2jr

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location informatio…

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Apr-2023 Release in Android 11, 12, 13

Advisories 1

References