Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-21497 EUVD-2023-25665GHSA-rhvx-39xq-gvf5

Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to acc…

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Select Android 13 devices – < SMR May-2023 Release 1 SMR May-2023 Release 1

Advisories 1

References