CVE-2023-21492
Samsung Mobile Devices
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
What it is
Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Samsung entries on the list
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 · Apr 24, 2026
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21042 · Nov 10, 2025
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21043 · Oct 2, 2025
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2025-4632 · May 22, 2025
- Mobile Devices Samsung Mobile Devices Use-After-Free Vulnerability CVE-2022-22265 · Sep 18, 2023
- Mobile Devices Samsung Mobile Devices Improper Input Validation Vulnerability CVE-2021-25489 · Jun 29, 2023