CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-05-04
Samsung Android Kernel Pointer Disclosure ASLR Bypass Vulnerability (CVE-2023-21492) Technical Analysis and Remediation Guide
[Affected Scope] Samsung Android mobile devices running firmware versions prior to the SMR May-2023 Release 1 security update
[Impact] A privileged local attacker can read exposed kernel pointers in system log files to bypass ASLR (Address Space Layout Randomization), facilitating subsequent kernel-level code execution
[Mitigation] Apply the Samsung May 2023 security update (SMR May-2023 Release 1) or later, and restrict access to sensitive system logs