CVE Watch—

CVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CVSS

—

Sem CVSS

EPSS

2.6%

p85

KEV

SIM

19 de mai. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

2.6%EPSS · 30 dias2.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Samsung / Mobile Devices

Vulnerabilidade

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Adicionado ao KEV

19 de mai. de 2023

Corrigir até

9 de jun. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Ação necessária

Apply updates per vendor instructions.

Notas

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2023-21492

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-210438.8 ALT

82.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability28d CVE-2025-210428.8 ALT

98.5%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability29d CVE-2021-25337—

86.6%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25369—

65.2%

KEV—70Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

59.5%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

56.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—