VDB
GSD-2023-21470
GSD-2023-21470
PUBLISHED
CVSS 4 MEDIUM
Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.
Risk Scores
CVSS v3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | SMR Apr-2023 Release in Android 11, 12, 13 |
Timeline
- Apr 3, 2023 CVE Published