VULNERABILITY INTELLIGENCE
CVE-2023-21446
CVSS score6.2 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2023-02-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- mobile.security@samsung.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory