Skip to content
OpenAdvisories
High · 8.5 CVE-2023-21491 EUVD-2023-25659GHSA-3fj3-8v7h-68xh

Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with …

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Android 12, 13 – < SMR May-2023 Release 1 SMR May-2023 Release 1

Advisories 1

References