CVE-2023-21492

Published May 4, 2023

Last updated 2 years ago

Overview

Description
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
Source
mobile.security@samsung.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
4.4
Impact score
3.6
Exploitability score
0.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Known exploits

Data from CISA

Vulnerability name
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Exploit added on
May 19, 2023
Exploit action due
Jun 9, 2023
Required action
Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov
CWE-532
mobile.security@samsung.com
CWE-532

Social media

Hype score
Not currently trending

Configurations