CVE-2023-42551

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Score

CVSS 3.1 6.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2023-11-07

Last modified

2024-09-12

Weaknesses

CWE-668

Affected products

• Account (Samsung)
• Samsung Account (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11