Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2023-21492 Details
Description
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 28, 2025Exploitation: ActiveAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21492 | CISA-ADP | US Government Resource |
| https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 | CVE | Vendor Advisory |
| https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 | [email protected] | Vendor Advisory |
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | May 19, 2023 | Jun 9, 2023 | Apply updates per vendor instructions. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-532 | Insertion of Sensitive Information into Log File | [email protected] |
| CWE-532 | Insertion of Sensitive Information into Log File | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| samsung android | 11.0 - 11.0 smr-apr-2021-r1 11.0 smr-apr-2022-r1 11.0 smr-apr-2023-r1 11.0 smr-aug-2021-r1 11.0 smr-aug-2022-r1 11.0 smr-dec-2020-r1 11.0 smr-dec-2021-r1 11.0 smr-dec-2022-r1 11.0 smr-feb-2021-r1 11.0 smr-feb-2022-r1 11.0 smr-feb-2023-r1 11.0 smr-jan-2021-r1 11.0 smr-jan-2022-r1 11.0 smr-jan-2023-r1 11.0 smr-jul-2021-r1 11.0 smr-jul-2022-r1 11.0 smr-jun-2021-r1 11.0 smr-jun-2022-r1 11.0 smr-mar-2021-r1 11.0 smr-mar-2022-r1 11.0 smr-mar-2023-r1 11.0 smr-may-2021-r1 11.0 smr-may-2022-r1 11.0 smr-nov-2021-r1 11.0 smr-nov-2022-r1 11.0 smr-oct-2021-r1 11.0 smr-oct-2022-r1 11.0 smr-sep-2021-r1 11.0 smr-sep-2022-r1 12.0 - 12.0 smr-apr-2022-r1 12.0 smr-apr-2023-r1 12.0 smr-aug-2022-r1 12.0 smr-dec-2021-r1 12.0 smr-dec-2022-r1 12.0 smr-feb-2022-r1 12.0 smr-feb-2023-r1 12.0 smr-jan-2022-r1 12.0 smr-jan-2023-r1 12.0 smr-jul-2022-r1 12.0 smr-jun-2022-r1 12.0 smr-mar-2022-r1 12.0 smr-mar-2023-r1 12.0 smr-may-2022-r1 12.0 smr-nov-2021-r1 12.0 smr-nov-2022-r1 12.0 smr-oct-2022-r1 12.0 smr-sep-2022-r1 13.0 - 13.0 smr-apr-2022-r1 13.0 smr-apr-2023-r1 13.0 smr-aug-2022-r1 13.0 smr-dec-2021-r1 13.0 smr-dec-2022-r1 13.0 smr-feb-2022-r1 13.0 smr-feb-2023-r1 13.0 smr-jan-2022-r1 13.0 smr-jan-2023-r1 13.0 smr-jul-2022-r1 13.0 smr-jun-2022-r1 13.0 smr-mar-2022-r1 13.0 smr-mar-2023-r1 13.0 smr-may-2022-r1 13.0 smr-nov-2021-r1 13.0 smr-nov-2022-r1 13.0 smr-oct-2022-r1 13.0 smr-sep-2022-r1 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 28, 2025 | Modified Analysis | [email protected] |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Feb 7, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| May 10, 2023 | Initial Analysis | [email protected] |