What is CVE-2023-21445?

CVE-2023-21445 is a medium-severity vulnerability in Samsung Android, classified under Improper Access Control. CVSS score: 5.5/10. Published 2023-02-09.

How severe is CVE-2023-21445?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Samsung Android

CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Samsung Android — versions 11.0, 12.0, 13.0
Samsung Mobile The Patch Adds Proper Access Control To Use Explicit Intent. — versions unspecified

Weakness classification (CWE)

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-21445?: CVE-2023-21445 is a medium-severity vulnerability in Samsung Android, classified under Improper Access Control. CVSS score: 5.5/10. Published 2023-02-09.
How severe is CVE-2023-21445?: Medium severity. CVSS v3 base score is 5.5 out of 10.