ACTIEF MISBRUIKT
CVE-2023-21492: Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
| Leverancier | Samsung |
|---|---|
| Product | Mobile Devices |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 19 mei 2023 |
| CISA-deadline (Amerikaanse overheid) | 9 jun 2023 |
| Zwakte (CWE) | CWE-532 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.
BRONNEN
Andere lekken bij Samsung
- CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.