ACTIVELY EXPLOITED
CVE-2023-21492: Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
| Vendor | Samsung |
|---|---|
| Product | Mobile Devices |
| Actively exploited | Yes |
| Added to CISA KEV | 19 May 2023 |
| CISA federal deadline | 9 Jun 2023 |
| Weakness (CWE) | CWE-532 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.
SOURCES
Other Samsung flaws
- CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.