7.8

CVE-2023-21439

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Android Version 12.0 Update -
Samsung ≫ Android Version 12.0 Update smr-apr-2022-r1
Samsung ≫ Android Version 12.0 Update smr-apr-2023-r1
Samsung ≫ Android Version 12.0 Update smr-aug-2022-r1
Samsung ≫ Android Version 12.0 Update smr-aug-2023-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2021-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2022-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2023-r1
Samsung ≫ Android Version 12.0 Update smr-feb-2022-r1
Samsung ≫ Android Version 12.0 Update smr-feb-2023-r1
Samsung ≫ Android Version 12.0 Update smr-jan-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jul-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jul-2023-r1
Samsung ≫ Android Version 12.0 Update smr-jun-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jun-2023-r1
Samsung ≫ Android Version 12.0 Update smr-mar-2022-r1
Samsung ≫ Android Version 12.0 Update smr-mar-2023-r1
Samsung ≫ Android Version 12.0 Update smr-may-2022-r1
Samsung ≫ Android Version 12.0 Update smr-may-2023-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2021-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2022-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2023-r1
Samsung ≫ Android Version 12.0 Update smr-oct-2022-r1
Samsung ≫ Android Version 12.0 Update smr-oct-2023-r1
Samsung ≫ Android Version 12.0 Update smr-sep-2022-r1
Samsung ≫ Android Version 12.0 Update smr-sep-2023-r1
Samsung ≫ Android Version 13.0 Update -
Samsung ≫ Android Version 13.0 Update smr-apr-2023-r1
Samsung ≫ Android Version 13.0 Update smr-aug-2023-r1
Samsung ≫ Android Version 13.0 Update smr-dec-2022-r1
Samsung ≫ Android Version 13.0 Update smr-dec-2023-r1
Samsung ≫ Android Version 13.0 Update smr-feb-2023-r1
Samsung ≫ Android Version 13.0 Update smr-jul-2023-r1
Samsung ≫ Android Version 13.0 Update smr-jun-2023-r1
Samsung ≫ Android Version 13.0 Update smr-mar-2023-r1
Samsung ≫ Android Version 13.0 Update smr-may-2023-r1
Samsung ≫ Android Version 13.0 Update smr-nov-2022-r1
Samsung ≫ Android Version 13.0 Update smr-nov-2023-r1
Samsung ≫ Android Version 13.0 Update smr-oct-2022-r1
Samsung ≫ Android Version 13.0 Update smr-oct-2023-r1
Samsung ≫ Android Version 13.0 Update smr-sep-2023-r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.081
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mobile.security@samsung.com 8.5 2.5 5.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02
Vendor Advisory