CVE-2023-21446

Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
samsungandroid
11.0
samsungandroid
11.0:smr-apr-2021-r1
samsungandroid
11.0:smr-apr-2022-r1
samsungandroid
11.0:smr-apr-2023-r1
samsungandroid
11.0:smr-aug-2021-r1
samsungandroid
11.0:smr-aug-2022-r1
samsungandroid
11.0:smr-aug-2023-r1
samsungandroid
11.0:smr-dec-2020-r1
samsungandroid
11.0:smr-dec-2021-r1
samsungandroid
11.0:smr-dec-2022-r1
samsungandroid
11.0:smr-dec-2023-r1
samsungandroid
11.0:smr-feb-2021-r1
samsungandroid
11.0:smr-feb-2022-r1
samsungandroid
11.0:smr-feb-2023-r1
samsungandroid
11.0:smr-jan-2021-r1
samsungandroid
11.0:smr-jan-2022-r1
samsungandroid
11.0:smr-jul-2021-r1
samsungandroid
11.0:smr-jul-2022-r1
samsungandroid
11.0:smr-jul-2023-r1
samsungandroid
11.0:smr-jun-2021-r1
samsungandroid
11.0:smr-jun-2022-r1
samsungandroid
11.0:smr-jun-2023-r1
samsungandroid
11.0:smr-mar-2021-r1
samsungandroid
11.0:smr-mar-2022-r1
samsungandroid
11.0:smr-mar-2023-r1
samsungandroid
11.0:smr-may-2021-r1
samsungandroid
11.0:smr-may-2022-r1
samsungandroid
11.0:smr-may-2023-r1
samsungandroid
11.0:smr-nov-2021-r1
samsungandroid
11.0:smr-nov-2022-r1
samsungandroid
11.0:smr-nov-2023-r1
samsungandroid
11.0:smr-oct-2021-r1
samsungandroid
11.0:smr-oct-2022-r1
samsungandroid
11.0:smr-oct-2023-r1
samsungandroid
11.0:smr-sep-2021-r1
samsungandroid
11.0:smr-sep-2022-r1
samsungandroid
11.0:smr-sep-2023-r1
samsungandroid
12.0
samsungandroid
12.0:smr-apr-2022-r1
samsungandroid
12.0:smr-apr-2023-r1
samsungandroid
12.0:smr-aug-2022-r1
samsungandroid
12.0:smr-aug-2023-r1
samsungandroid
12.0:smr-dec-2021-r1
samsungandroid
12.0:smr-dec-2022-r1
samsungandroid
12.0:smr-dec-2023-r1
samsungandroid
12.0:smr-feb-2022-r1
samsungandroid
12.0:smr-feb-2023-r1
samsungandroid
12.0:smr-jan-2022-r1
samsungandroid
12.0:smr-jul-2022-r1
samsungandroid
12.0:smr-jul-2023-r1
samsungandroid
12.0:smr-jun-2022-r1
samsungandroid
12.0:smr-jun-2023-r1
samsungandroid
12.0:smr-mar-2022-r1
samsungandroid
12.0:smr-mar-2023-r1
samsungandroid
12.0:smr-may-2022-r1
samsungandroid
12.0:smr-may-2023-r1
samsungandroid
12.0:smr-nov-2021-r1
samsungandroid
12.0:smr-nov-2022-r1
samsungandroid
12.0:smr-nov-2023-r1
samsungandroid
12.0:smr-oct-2022-r1
samsungandroid
12.0:smr-oct-2023-r1
samsungandroid
12.0:smr-sep-2022-r1
samsungandroid
12.0:smr-sep-2023-r1
samsungandroid
13.0
samsungandroid
13.0:smr-apr-2023-r1
samsungandroid
13.0:smr-aug-2023-r1
samsungandroid
13.0:smr-dec-2022-r1
samsungandroid
13.0:smr-dec-2023-r1
samsungandroid
13.0:smr-feb-2023-r1
samsungandroid
13.0:smr-jul-2023-r1
samsungandroid
13.0:smr-jun-2023-r1
samsungandroid
13.0:smr-mar-2023-r1
samsungandroid
13.0:smr-may-2023-r1
samsungandroid
13.0:smr-nov-2022-r1
samsungandroid
13.0:smr-nov-2023-r1
samsungandroid
13.0:smr-oct-2022-r1
samsungandroid
13.0:smr-oct-2023-r1
samsungandroid
13.0:smr-sep-2023-r1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02