CVE-2023-42550

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Score

CVSS 3.1 6.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2023-11-07

Last modified

2024-09-12

Affected products

• Account (Samsung)
• Samsung Account (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11