What is CVE-2023-30730?

CVE-2023-30730 is a low-severity vulnerability in Google Android, classified under CWE-285: IMPROPER AUTHORIZATION. CVSS score: 3.3/10. Published 2023-09-06.

How severe is CVE-2023-30730?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Google Android

CVE-2023-30730

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.

EPSS: 0.001 (3.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Google Android — versions 11.0, 12.0, 13.0
Samsung Camera
Samsung Mobile Camera — versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-30730?: CVE-2023-30730 is a low-severity vulnerability in Google Android, classified under CWE-285: IMPROPER AUTHORIZATION. CVSS score: 3.3/10. Published 2023-09-06.
How severe is CVE-2023-30730?: Low severity. CVSS v3 base score is 3.3 out of 10.