CVE-2023-21441

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
samsungandroid
10.0
samsungandroid
10.0:smr-apr-2020-r1
samsungandroid
10.0:smr-apr-2021-r1
samsungandroid
10.0:smr-apr-2022-r1
samsungandroid
10.0:smr-apr-2023-r1
samsungandroid
10.0:smr-aug-2020-r1
samsungandroid
10.0:smr-aug-2021-r1
samsungandroid
10.0:smr-aug-2022-r1
samsungandroid
10.0:smr-aug-2023-r1
samsungandroid
10.0:smr-dec-2019-r1
samsungandroid
10.0:smr-dec-2020-r1
samsungandroid
10.0:smr-dec-2021-r1
samsungandroid
10.0:smr-dec-2022-r1
samsungandroid
10.0:smr-dec-2023-r1
samsungandroid
10.0:smr-feb-2020-r1
samsungandroid
10.0:smr-feb-2021-r1
samsungandroid
10.0:smr-feb-2022-r1
samsungandroid
10.0:smr-feb-2023-r1
samsungandroid
10.0:smr-jan-2020-r1
samsungandroid
10.0:smr-jan-2021-r1
samsungandroid
10.0:smr-jan-2022-r1
samsungandroid
10.0:smr-jul-2020-r1
samsungandroid
10.0:smr-jul-2021-r1
samsungandroid
10.0:smr-jul-2022-r1
samsungandroid
10.0:smr-jul-2023-r1
samsungandroid
10.0:smr-jun-2020-r1
samsungandroid
10.0:smr-jun-2021-r1
samsungandroid
10.0:smr-jun-2022-r1
samsungandroid
10.0:smr-jun-2023-r1
samsungandroid
10.0:smr-mar-2020-r1
samsungandroid
10.0:smr-mar-2021-r1
samsungandroid
10.0:smr-mar-2022-r1
samsungandroid
10.0:smr-mar-2023-r1
samsungandroid
10.0:smr-may-2020-r1
samsungandroid
10.0:smr-may-2021-r1
samsungandroid
10.0:smr-may-2022-r1
samsungandroid
10.0:smr-may-2023-r1
samsungandroid
10.0:smr-nov-2019-r1
samsungandroid
10.0:smr-nov-2020-r1
samsungandroid
10.0:smr-nov-2021-r1
samsungandroid
10.0:smr-nov-2022-r1
samsungandroid
10.0:smr-nov-2023-r1
samsungandroid
10.0:smr-oct-2020-r1
samsungandroid
10.0:smr-oct-2021-r1
samsungandroid
10.0:smr-oct-2022-r1
samsungandroid
10.0:smr-oct-2023-r1
samsungandroid
10.0:smr-sep-2020-r1
samsungandroid
10.0:smr-sep-2021-r1
samsungandroid
10.0:smr-sep-2022-r1
samsungandroid
10.0:smr-sep-2023-r1
samsungandroid
11.0
samsungandroid
11.0:smr-apr-2021-r1
samsungandroid
11.0:smr-apr-2022-r1
samsungandroid
11.0:smr-apr-2023-r1
samsungandroid
11.0:smr-aug-2021-r1
samsungandroid
11.0:smr-aug-2022-r1
samsungandroid
11.0:smr-aug-2023-r1
samsungandroid
11.0:smr-dec-2020-r1
samsungandroid
11.0:smr-dec-2021-r1
samsungandroid
11.0:smr-dec-2022-r1
samsungandroid
11.0:smr-dec-2023-r1
samsungandroid
11.0:smr-feb-2021-r1
samsungandroid
11.0:smr-feb-2022-r1
samsungandroid
11.0:smr-feb-2023-r1
samsungandroid
11.0:smr-jan-2021-r1
samsungandroid
11.0:smr-jan-2022-r1
samsungandroid
11.0:smr-jul-2021-r1
samsungandroid
11.0:smr-jul-2022-r1
samsungandroid
11.0:smr-jul-2023-r1
samsungandroid
11.0:smr-jun-2021-r1
samsungandroid
11.0:smr-jun-2022-r1
samsungandroid
11.0:smr-jun-2023-r1
samsungandroid
11.0:smr-mar-2021-r1
samsungandroid
11.0:smr-mar-2022-r1
samsungandroid
11.0:smr-mar-2023-r1
samsungandroid
11.0:smr-may-2021-r1
samsungandroid
11.0:smr-may-2022-r1
samsungandroid
11.0:smr-may-2023-r1
samsungandroid
11.0:smr-nov-2021-r1
samsungandroid
11.0:smr-nov-2022-r1
samsungandroid
11.0:smr-nov-2023-r1
samsungandroid
11.0:smr-oct-2021-r1
samsungandroid
11.0:smr-oct-2022-r1
samsungandroid
11.0:smr-oct-2023-r1
samsungandroid
11.0:smr-sep-2021-r1
samsungandroid
11.0:smr-sep-2022-r1
samsungandroid
11.0:smr-sep-2023-r1
samsungandroid
12.0
samsungandroid
12.0:smr-apr-2022-r1
samsungandroid
12.0:smr-apr-2023-r1
samsungandroid
12.0:smr-aug-2022-r1
samsungandroid
12.0:smr-aug-2023-r1
samsungandroid
12.0:smr-dec-2021-r1
samsungandroid
12.0:smr-dec-2022-r1
samsungandroid
12.0:smr-dec-2023-r1
samsungandroid
12.0:smr-feb-2022-r1
samsungandroid
12.0:smr-feb-2023-r1
samsungandroid
12.0:smr-jan-2022-r1
samsungandroid
12.0:smr-jul-2022-r1
samsungandroid
12.0:smr-jul-2023-r1
samsungandroid
12.0:smr-jun-2022-r1
samsungandroid
12.0:smr-jun-2023-r1
samsungandroid
12.0:smr-mar-2022-r1
samsungandroid
12.0:smr-mar-2023-r1
samsungandroid
12.0:smr-may-2022-r1
samsungandroid
12.0:smr-may-2023-r1
samsungandroid
12.0:smr-nov-2021-r1
samsungandroid
12.0:smr-nov-2022-r1
samsungandroid
12.0:smr-nov-2023-r1
samsungandroid
12.0:smr-oct-2022-r1
samsungandroid
12.0:smr-oct-2023-r1
samsungandroid
12.0:smr-sep-2022-r1
samsungandroid
12.0:smr-sep-2023-r1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02