{"id":"CVE-2023-30730","state":"PUBLISHED","title":"Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Androi","description":"Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.","publishedAt":"2023-09-06T03:12:16.839Z","updatedAt":"2024-09-26T15:52:23.943Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","source":"Samsung Mobile"},"assigner":"Samsung Mobile","products":["Samsung Mobile Camera"],"affected":[{"vendor":"Samsung Mobile","product":"Camera","defaultStatus":"affected","versions":[{"version":"11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13","status":"unaffected"}]}],"references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/30xxx/CVE-2023-30730.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-30730","state":"PUBLISHED","datePublished":"2023-09-06T03:12:16.839Z","dateUpdated":"2024-09-26T15:52:23.943Z","assignerShortName":"Samsung Mobile","assignerOrgId":"3af57064-a867-422c-b2ad-40307b65c458","dateReserved":"2023-04-14T01:59:51.138Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file."}],"affected":[{"vendor":"Samsung Mobile","product":"Camera","defaultStatus":"affected","versions":[{"version":"11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13","status":"unaffected"}]}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"LOW","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-285: Improper Authorization"}]}],"providerMetadata":{"shortName":"Samsung Mobile","orgId":"3af57064-a867-422c-b2ad-40307b65c458","dateUpdated":"2023-09-06T03:12:16.839Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T14:37:15.258Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-26T15:46:43.109690Z","id":"CVE-2023-30730","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-26T15:52:23.943Z"}}]}}}