Medium · 6.3 CVE-2023-21474 EUVD-2023-25642GHSA-v2r3-2vm5-58f5

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privi…

Published Sep 3, 2025 · Updated Nov 3, 2026 · Assigned by SamsungMobile

Description

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.

Vendor	Product	Affected	Fixed
Samsung Mobile	Samsung Mobile Devices	—	SMR Apr-2023 Release in Android 11, 12, 13

CNA	v3.1	6.3
EUVD	v3.1	6.3