← Vulnerability Intelligence

CVE-2023-21492

Medium 4.4 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

Metrics

CVSS 3.1
4.4 (MEDIUM) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS — exploit probability
3% (percentile: 85) as of 2 November 2026
CWE
CWE-532

Affected products

samsung: android

References