CVE-2023-21492

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

Basic Information

CVE State: PUBLISHED
Reserved Date: November 14, 2022
Published Date: May 04, 2023
Last Updated: January 28, 2025
Vendor: Samsung Mobile
Product: Samsung Mobile Devices
Description: Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

CVSS Scores

CVSS v3.1

4.4 - MEDIUM

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

SSVC Information

Exploitation: active
Technical Impact: partial

Exploit Status

Exploited in the Wild: Yes (added 2023-05-19 00:00:00 UTC) Source

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05

Known Exploited Vulnerability Information

Source	Added Date
CISA	2023-05-19 00:00:00 UTC