Vulnerabilities > CVE-2023-21438 - Exposure of Resource to Wrong Sphere vulnerability in Samsung Android 11.0/12.0

047910
CVSS 2.4 - LOW
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
low complexity
samsung
CWE-668

Summary

Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder.

Vulnerable Configurations

Part Description Count
OS
Samsung
63

Common Weakness Enumeration (CWE)