#VU76542 Inclusion of sensitive information in log files in Samsung Mobile Firmware - CVE-2023-21492

Vulnerability identifier: #VU76542

Vulnerability risk: Medium

CVSSv4.0: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2023-21492

CWE-ID: CWE-532

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Samsung Mobile Firmware
Mobile applications / Mobile firmware & hardware

Vendor: Samsung

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to kernel pointers are printed into the log file. A local application can read the log file and use the kernel pointers to bypass ASLR protection.

Note, the vulnerability is being exploited in the wild.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Samsung Mobile Firmware: before SMR-MAY-2023

---

External links
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.