Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-42534 EUVD-2023-46967GHSA-5cv5-89gg-486r

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files w…

Published Nov 7, 2023 · Updated Sep 4, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Nov-2023 Release in Android 12, 13

Advisories 1

References