Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2023-21491

Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.

Description

Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Mobile Devices

  • Android 12, 13 to < SMR May-2023 Release 1affected

References