CRITICAL✓ PATCH🇬🇧 English

CVE-2023-21456

CVSS 9.0v3.1pub. 2023-03-16upd. 2024-11-21

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

  • Samsung Android

    OS
    Samsung
    11.012.013.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2025-21043HIGH8.8⚠ KEVten sam produkt

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execu...

CVE-2025-21042HIGH8.8⚠ KEVten sam produkt

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execu...

CVE-2021-25487HIGH7.3⚠ KEVten sam produkt

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Releas...

CVE-2026-20990HIGH8.4ten sam produkt

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows loca...

CVE-2026-20979HIGH8.4ten sam produkt

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arb...