Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Samsung · Mobile Devices
Date added (CISA)
2023-05-19
Remediation due
2023-06-09
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.