CVE Watch—

CVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CVSS

—

No CVSS

EPSS

2.6%

p85

KEV

YES

May 19, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

2.6%EPSS · 30 days2.6%

2026-09-182026-10-15

KEV catalog record

Product

Samsung / Mobile Devices

Vulnerability

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Added to KEV

May 19, 2023

Remediate by

Jun 9, 2023

Known ransomware use

Summary description

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Required action

Apply updates per vendor instructions.

Notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2023-21492

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-210438.8 HIG

81.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability8d CVE-2025-210428.8 HIG

98.4%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability9d CVE-2021-25337—

86.3%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25369—

64.4%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

58.6%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

55.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—