CVEvulnerability

CVE-2023-21445

7.8 HIGH Published 2023-02-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-284, CWE-668

Description

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

Affected configurations

• samsung android 11.0 • samsung android 12.0 • samsung android 13.0

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References