CVE-2013-4764

Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2019-12-27

Last modified

2024-08-06

Weaknesses

CWE-276

Affected products

• Galaxy S3 Firmware (Samsung)
• Galaxy S4 Firmware (Samsung)

References

• http://shouji.360.cn/securityReportlist/CVE-2013-4764.html
• https://seclists.org/bugtraq/2013/Jul/107