Skip to content
OpenAdvisories
Medium · 6.2 CVE-2023-42531 EUVD-2023-46964GHSA-5cwm-xw7v-fmp2

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on star…

Published Nov 7, 2023 · Updated Jun 12, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Nov-2023 Release in Android 11, 12, 13

Advisories 1

References