Description
Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
Scores
CVSS v3
5.3
EPSS
0.0008
EPSS Percentile
24.5%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-926
Status
published
Products (3)
samsung/android
11.0 (27 CPE variants)
samsung/android
12.0 (16 CPE variants)
samsung/android
13.0 (7 CPE variants)
Published
May 04, 2023
Tracked Since
Feb 18, 2026