CVE-2023-21441

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Samsung MobileCNA
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
samsungandroid
10.0
samsungandroid
10.0:smr-apr-2020-r1
samsungandroid
10.0:smr-apr-2021-r1
samsungandroid
10.0:smr-apr-2022-r1
samsungandroid
10.0:smr-apr-2023-r1
samsungandroid
10.0:smr-aug-2020-r1
samsungandroid
10.0:smr-aug-2021-r1
samsungandroid
10.0:smr-aug-2022-r1
samsungandroid
10.0:smr-aug-2023-r1
samsungandroid
10.0:smr-dec-2019-r1
samsungandroid
10.0:smr-dec-2020-r1
samsungandroid
10.0:smr-dec-2021-r1
samsungandroid
10.0:smr-dec-2022-r1
samsungandroid
10.0:smr-dec-2023-r1
samsungandroid
10.0:smr-feb-2020-r1
samsungandroid
10.0:smr-feb-2021-r1
samsungandroid
10.0:smr-feb-2022-r1
samsungandroid
10.0:smr-feb-2023-r1
samsungandroid
10.0:smr-jan-2020-r1
samsungandroid
10.0:smr-jan-2021-r1
samsungandroid
10.0:smr-jan-2022-r1
samsungandroid
10.0:smr-jul-2020-r1
samsungandroid
10.0:smr-jul-2021-r1
samsungandroid
10.0:smr-jul-2022-r1
samsungandroid
10.0:smr-jul-2023-r1
samsungandroid
10.0:smr-jun-2020-r1
samsungandroid
10.0:smr-jun-2021-r1
samsungandroid
10.0:smr-jun-2022-r1
samsungandroid
10.0:smr-jun-2023-r1
samsungandroid
10.0:smr-mar-2020-r1
samsungandroid
10.0:smr-mar-2021-r1
samsungandroid
10.0:smr-mar-2022-r1
samsungandroid
10.0:smr-mar-2023-r1
samsungandroid
10.0:smr-may-2020-r1
samsungandroid
10.0:smr-may-2021-r1
samsungandroid
10.0:smr-may-2022-r1
samsungandroid
10.0:smr-may-2023-r1
samsungandroid
10.0:smr-nov-2019-r1
samsungandroid
10.0:smr-nov-2020-r1
samsungandroid
10.0:smr-nov-2021-r1
samsungandroid
10.0:smr-nov-2022-r1
samsungandroid
10.0:smr-nov-2023-r1
samsungandroid
10.0:smr-oct-2020-r1
samsungandroid
10.0:smr-oct-2021-r1
samsungandroid
10.0:smr-oct-2022-r1
samsungandroid
10.0:smr-oct-2023-r1
samsungandroid
10.0:smr-sep-2020-r1
samsungandroid
10.0:smr-sep-2021-r1
samsungandroid
10.0:smr-sep-2022-r1
samsungandroid
10.0:smr-sep-2023-r1
samsungandroid
11.0
samsungandroid
11.0:smr-apr-2021-r1
samsungandroid
11.0:smr-apr-2022-r1
samsungandroid
11.0:smr-apr-2023-r1
samsungandroid
11.0:smr-aug-2021-r1
samsungandroid
11.0:smr-aug-2022-r1
samsungandroid
11.0:smr-aug-2023-r1
samsungandroid
11.0:smr-dec-2020-r1
samsungandroid
11.0:smr-dec-2021-r1
samsungandroid
11.0:smr-dec-2022-r1
samsungandroid
11.0:smr-dec-2023-r1
samsungandroid
11.0:smr-feb-2021-r1
samsungandroid
11.0:smr-feb-2022-r1
samsungandroid
11.0:smr-feb-2023-r1
samsungandroid
11.0:smr-jan-2021-r1
samsungandroid
11.0:smr-jan-2022-r1
samsungandroid
11.0:smr-jul-2021-r1
samsungandroid
11.0:smr-jul-2022-r1
samsungandroid
11.0:smr-jul-2023-r1
samsungandroid
11.0:smr-jun-2021-r1
samsungandroid
11.0:smr-jun-2022-r1
samsungandroid
11.0:smr-jun-2023-r1
samsungandroid
11.0:smr-mar-2021-r1
samsungandroid
11.0:smr-mar-2022-r1
samsungandroid
11.0:smr-mar-2023-r1
samsungandroid
11.0:smr-may-2021-r1
samsungandroid
11.0:smr-may-2022-r1
samsungandroid
11.0:smr-may-2023-r1
samsungandroid
11.0:smr-nov-2021-r1
samsungandroid
11.0:smr-nov-2022-r1
samsungandroid
11.0:smr-nov-2023-r1
samsungandroid
11.0:smr-oct-2021-r1
samsungandroid
11.0:smr-oct-2022-r1
samsungandroid
11.0:smr-oct-2023-r1
samsungandroid
11.0:smr-sep-2021-r1
samsungandroid
11.0:smr-sep-2022-r1
samsungandroid
11.0:smr-sep-2023-r1
samsungandroid
12.0
samsungandroid
12.0:smr-apr-2022-r1
samsungandroid
12.0:smr-apr-2023-r1
samsungandroid
12.0:smr-aug-2022-r1
samsungandroid
12.0:smr-aug-2023-r1
samsungandroid
12.0:smr-dec-2021-r1
samsungandroid
12.0:smr-dec-2022-r1
samsungandroid
12.0:smr-dec-2023-r1
samsungandroid
12.0:smr-feb-2022-r1
samsungandroid
12.0:smr-feb-2023-r1
samsungandroid
12.0:smr-jan-2022-r1
samsungandroid
12.0:smr-jul-2022-r1
samsungandroid
12.0:smr-jul-2023-r1
samsungandroid
12.0:smr-jun-2022-r1
samsungandroid
12.0:smr-jun-2023-r1
samsungandroid
12.0:smr-mar-2022-r1
samsungandroid
12.0:smr-mar-2023-r1
samsungandroid
12.0:smr-may-2022-r1
samsungandroid
12.0:smr-may-2023-r1
samsungandroid
12.0:smr-nov-2021-r1
samsungandroid
12.0:smr-nov-2022-r1
samsungandroid
12.0:smr-nov-2023-r1
samsungandroid
12.0:smr-oct-2022-r1
samsungandroid
12.0:smr-oct-2023-r1
samsungandroid
12.0:smr-sep-2022-r1
samsungandroid
12.0:smr-sep-2023-r1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02