CVE-2023-21492β€”Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

PUBLISHEDvulnerability record
2023-05-19 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2023-21492
Project:
Samsung
Product:
Mobile Devices
Date Added:
2023-05-19
Due Date:
2023-06-09
Last Updated:
June 21, 2025

Vulnerability Name

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Description

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://security.samsungmobile.com/securityUpdate.smsb
  • https://nvd.nist.gov/vuln/detail/CVE-2023-21492

Related Weaknesses

browse all CVEs