What is CVE-2023-21482?

CVE-2023-21482 is a medium-severity vulnerability in Google Android, classified under CWE-862 MISSING AUTHORIZATION. CVSS score: 6.1/10. Published 2025-09-03.

How severe is CVE-2023-21482?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Google Android

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard.

EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Google Android — versions 11.0, 12.0, 13.0
Samsung Camera
Samsung Mobile Camera — versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-21482?: CVE-2023-21482 is a medium-severity vulnerability in Google Android, classified under CWE-862 MISSING AUTHORIZATION. CVSS score: 6.1/10. Published 2025-09-03.
How severe is CVE-2023-21482?: Medium severity. CVSS v3 base score is 6.1 out of 10.