CVE Watch—

CVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CVSS

—

No CVSS

EPSS

2.6%

p84

KEV

YES

May 19, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

2.6%EPSS · 30 days2.6%

2026-08-032026-08-31

KEV catalog record

Product

Samsung / Mobile Devices

Vulnerability

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Added to KEV

May 19, 2023

Remediate by

Jun 9, 2023

Known ransomware use

Summary description

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Required action

Apply updates per vendor instructions.

Notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2023-21492

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-21042—

98.2%

KEV—79Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25337—

85.6%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2025-21043—

78.1%

KEV—73Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25369—

63.9%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

56.9%

KEV—67Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

54.2%

KEV—66Samsung Mobile Devices Improper Boundary Check Vulnerability—