VDB
CVE-2023-21445
CVE-2023-21445
PUBLISHED
CVSS 5.5 MEDIUM
Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.
EPSS 0.19% · 8.4th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.19%
8.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| samsung | android | 11.0, 11.0, 11.0 |
| Samsung Mobile | The patch adds proper access control to use explicit intent. | unspecified, unspecified |
Timeline
- Feb 9, 2023 CVE Published
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 1, 2023 EPSS Score
- Jun 10, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 8, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
- Feb 5, 2024 EPSS Score