CVE-2023-21441

Published Feb 9, 2023 CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Description
Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-25609 Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Samsung Mobile
Published
Updated
Mar 24, 2025, 7:08 PM
Reserved
Nov 14, 2022, 12:00 AM
Status
Modified
Published
Feb 9, 2023, 7:15 PM
Modified
Jun 17, 2026, 5:32 AM