CVE-2023-21445

MEDIUM

Samsung Android MyFiles < 12.2.09/13.1.03.501/14.1.00.422 - Unauthenticated Arbitrary File Write via Implicit Intent

Title source: llm
STIX 2.1

Description

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 8.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284 CWE-668
Status published
Products (2)
samsung/android 11.0 (37 CPE variants)
samsung/android 12.0 (13 CPE variants)
Published Feb 09, 2023
Tracked Since Feb 18, 2026